I look like a hero at work these days. I recommended against Okta as an oauth provider a few weeks before the this and the MGM hacks.
this post was submitted on 29 Nov 2023
92 points (97.9% liked)
Technology
58942 readers
3429 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
Okta is the defacto sso provider these days. All products are built for it, which is bad because we saw how well they handle security in the last few weeks.
Everything has gone OAuth and Okta is heavily involved in the OAuth working group. They're really intertwined.
Azure AD, ok, Entra ID would like a word.
What were your reasons and arguments?
Mainly money but I also expressed nervousness about their AD bridge which, it turns out, is where the privilege execution happened in the MGM hack.