News for hackers. Stuff that matters.

A comment on What Is OIDC?. Parent comment

Re:What Is OIDC? by midasuni on Friday December 22, 2023 @04:11AM (#38732403)
I just use MTLS, MDM software like intune deploys the certificates.

Elsewhere in the org we have openAM which ties into AD and provides an OIDC/SAML integration.

Your blanket “don’t do authentication” statement is filled with so many specific circumstances and caveats which don’t apply to many difference cases it just sounds uninformed and thus arrogant.

[ Parent | on HN ]
Re:What Is OIDC? by wirelesspotat on Friday December 22, 2023 @05:54AM (#38732991)
GP did agree that there are some cases where this doesn't apply:

> Not all businesses are the same, and I'm sure there are some where you need to run auth in-house (like if you're selling on-prem software), but I'm mindful that most companies simply cannot run auth securely.

[ Parent | on HN ]
Re:What Is OIDC? by midasuni on Friday December 22, 2023 @07:27AM (#38733486)
Most companies have run auth for decades, typically via AD, but things like Novell before that.
[ Parent | on HN ]