Who will they replace Okta with? Everyone in security space worth mentioning has been breached - including nation-state agencies.
> Why not just use Microsoft or Google for this...
Didn't Microsoft recently have an egregious security lapse on Azure?
Who will they replace Okta with? Everyone in security space worth mentioning has been breached - including nation-state agencies.
> Why not just use Microsoft or Google for this...
Didn't Microsoft recently have an egregious security lapse on Azure?
When I read through the details of Microsoft's hacks, it will be talking about some obscure exploit against the security professional that had a background check done of them who uses hardened locked down secure access workstation to do their tasks
https://arstechnica.com/security/2023/09/hack-of-a-microsoft...
There is a difference in the degree of egregiousness. I doubt the average business has better security practices than Microsoft, whereas I'd be pretty confident saying many businesses have better security practices than Okta. What shocks me about Okta's breaches is how easy they would be to prevent from happening if Okta cared just a little.
And Google is trying to push their identity products, but they are very far from being mature enough for enterprise needs.
I generally suspect folks making comments like this are really not familiar with the products and their uses.
Most of the folks we see are moving from Firebase rather than Google Identity Platform. Wait, I'm confused. Are they the same thing? https://cloud.google.com/identity-platform/docs/sign-in-user... uses them interchangeably.
Ah, another search turns up https://cloud.google.com/identity-platform/docs/product-comp...
So Firebase auth is built on Google Identity Platform.
I did consult other groups using Google Identity Platform at our company and some things came up:
* SMS / email templates not customizable
* Undocumented user auth rate limiting with hacky workarounds
Otherwise our devs have been quite happy with it. I've primarily settled on it because it already has approval at our org, it's simple, and fairly well documented - especially compared to something like Cognito.> I've primarily settled on it because it already has approval at our org, it's simple, and fairly well documented
Those are great reasons to select a product. If it works for you, it works for you!
> especially compared to something like Cognito.
I was half expecting a new CIAM solution from AWS at Re:Invent. I don't understand why they don't invest more in Cognito. Such an own-goal.