Okta Exposes Passwords in Clear Text for Possible Theft

Re:Okta Exposes Passwords in Clear Text for Possible Theft by bagels on Sunday September 25, 2022 @02:57AM (#32969477)

Apologies that my question wasn't clear enough. I am building a remote company and we use a ton of products. I'd like centralized authentication + sso + ability to enforce yubikeys for AWS, Jira Cloud, Bitbucket, and a ton of others that OKTA supports for SSO.

[ Parent | on HN ]

Re:Okta Exposes Passwords in Clear Text for Possible Theft by mdtusz on Sunday September 25, 2022 @11:39AM (#32972387)

Azure Active Directory manages this well. If your company uses office365, it's likely you already are using this under the hood.

[ Parent | on HN ]

Re:Okta Exposes Passwords in Clear Text for Possible Theft by jf on Sunday September 25, 2022 @03:06AM (#32969517)

(Disclaimer: I’m an Okta employee)

Okta works really well in your use case. I recommend trying it out yourself.

Since you mention YubiKeys, I’d also suggest that you try removing passwords from your setup entirely by using YubiKeys and one or more other factors.

If you don’t want to use Okta, I’m also happy to give you my take on the alternatives to consider. Feel free to reach out to me directly.

[ Parent | on HN ]