Password Requirements: Myths and Madness

Re:Password Requirements: Myths and Madness by eastbound on Thursday December 22, 2022 @10:49PM (#34102156)

I’m a small company and the problem with SAML is that it requires the “enterprise” plan for each app. Slack goes from 0 to $11.75/month/user, Miro goes from $8 to $16. Then you have to pay for Okta (Isn’t it $15/u/m?) For a 5-person business it’s $1185 difference + $900 for Okta, and that doesn’t make me SOC2 compliant (There is a bunch of other requirements, secure access to physical offices, logs, etc.).

[ Parent | on HN ]

Re:Password Requirements: Myths and Madness by ethanzh on Friday December 23, 2022 @03:56AM (#34103690)

sso.tax lists tons of examples of the price increases you’ve mentioned

[ Parent | on HN ]

Re:Password Requirements: Myths and Madness by eastbound on Friday December 23, 2022 @05:55AM (#34104414)

I love that! Needs to be more known, it’s like SSL certificates when LetsEncrypt didn’t exist.

Edit: It has been posted 7 times in the last year.

[ Parent | on HN ]

Re:Password Requirements: Myths and Madness by Spooky23 on Friday December 23, 2022 @09:51AM (#34106420)

Usually it makes sense to use Google or Microsoft as an IDP vs Okta.

Totally hear you re the cost, it depends on the risks you face. I’m in a bigger enterprise, but for me, no SSO, it is out in 95% of situations. In the exceptions we have, we require vaulted passwords.

A breach would put me out of business, and identity is a key security control for many risks.

[ Parent | on HN ]