Okta

“Didn't Okta had several major hacking incidents over the last decade as well?”

“Trusting an SSO system, or anything with security sensitive data on the public internet presents an attack surface with untenable risk”

“Okta, SSO and MDM services in general are an extremely major single point of failure”

“Okta's SSO isn't enough for MS.”

“trying to sign in to Okta on my personal Linux desktop computer”

“You can mitigate this a bit via using something like Okta, which just does not have this data”

“Okta got thoroughly compromised two years in a row (2022 and 2023)”

“the admin policy UI makes it next to impossible to have passkey-only login”

“the first search for Okta in the app store isn't the actual Okta app”

“handing over login credentials to Octa should be a consideration”

“The amount of time I spend per day waiting for my web browser to do about 10 redirects through Okta”

“Okta seemed expensive, but usable and decent”

“given their rate of incidents how can you trust it”

“it makes total sense that they solved this (very real) problem”

“they wanted to charge out the nose for it for no good reason”

“Okta Fastpass means the flow is “click login, click use fastpass, use fingerprint for Touch ID” and you’re golden”

“SSO providers keep adding stuff ALL the time, and they regularly have issues.”

“Okta is the same. I want to cry every time I see that login screen.”

“A lot of software (Github, Okta, etc. etc.) will just delete portions of their UI”

“platform SSO works pretty well, at least with Entra and Okta”

“Okta is already public and has been for years. They had an exit already. For whatever reason, many large organizations trust them.”

“I've worked on auth systems used in banking and govt applications as well as integration with a number of platforms including Okta/Auth0”

“I love going through a bloated login process multiple times a day”

“after they had to be the ones to let Okta know it'd been breached yet again”

“when something doesn't work well like their super custom LDAP endpoint, talking to support is really painful”

“suggesting people to turn off DNS Rebind protection to work around their incompetence”

“Okta has committed to and has had a consitent track record of delivering at least one full scale security breach”

“Anyone that uses Okta should be accepting the fact that they have outsourced a huge chunk of responsibility of their job onto an enterprise company”

“subsume a superior product under the mediocrity of its own offering”

“I found them way better to implement SSO in my small startup”

“Okta does not take security seriously, contrary to what they say at their earnings calls.”

“I had caught multiple dealbreakers-for-me such dubious / conflicting config settings resulting in exposures”

“Their support is the worst (we always got someone overseas who only seemed to understand anything, probably they were trained on some corpus)”

“Not worth 6+ figures a year and exposure to Okta breach risk.”

“They prioritize features purchasing departments want, not functionality.”

“worse product with worse engineering that checks more boxes on the feature page”

“many people will spend a million dollars to use Okta for their 10,000 logins/day”

“I was pretty appalled to see such a basic mistake from a security company, but then again it is Okta.”

“Security companies that prioritize bugs being sold rather than be reported will eventually blow up.”

“I know it has to be enabled per-tenant in Okta and Azure (which nobody does)”