News for hackers. Stuff that matters.

A comment on Ask HN: Any comprehensive courses on Auth?. Parent comment

Re:Ask HN: Any comprehensive courses on Auth? by shadowbanned4 on Sunday November 19, 2023 @10:46AM (#38333683)
I worked for the largest company in Canada who handled billions of dollars. You can make your decision but they won't do anything.
[ Parent | on HN ]
Re:Ask HN: Any comprehensive courses on Auth? by mooreds on Sunday November 19, 2023 @10:47AM (#38333693)
They still used basic auth across all their apps?
[ Parent | on HN ]
Re:Ask HN: Any comprehensive courses on Auth? by shadowbanned4 on Sunday November 19, 2023 @06:39PM (#38339868)
No. They used Oauth. I wrote their entire Oauth system. And it was a nightmare reading through Oauth/OIDC specs for something that could be handled trivially with http basic auth.
[ Parent | on HN ]
Re:Ask HN: Any comprehensive courses on Auth? by clarkmcc on Sunday November 19, 2023 @11:55AM (#38334562)
I work on the cloud security team for a Fortune 500 company. They won’t even consider a third party service that doesn’t provide a enterprise SSO/SAML integration with our auth provider. I suspect this is the more common approach for enterprise level companies given that at 40k+ employees it’s just not possible to manage employee auth across hundreds of services.
[ Parent | on HN ]