I'm feeling good we decided against a third-party auth provider; even in the face of internal pressure.
BRB, gotta step out to say "I told you so"
If every company that uses Okta rolled their own auth, there would likely be more breaches than this.
But just one company at a time. There's something to be said for heterogeneity.
The blast radius is bigger when a centralized service is breached into.
I just have folks use different auth in different contexts, not about rolling my own. Basically means using more passwords. Sorry, you need to login to each place separately. I offer a locally hosted password manager.
How do you handle rolling passwords when there’s a breach?