‹ BackHN Continuity

Thread

SAML: A fractal of bad design

353 points · 190 comments · aray07

  1. ocdtrekkie · · focus · HN ↗
    Eh, if you don't have SAML support, I can find a product that does. Not a problem. \o/

    (Or to be more clear, it is mostly unacceptable for an enterprise product to have opinionated decisions about what authentication it works with. You either work with what we use or you are not viable as a product for our need. It's kinda simple. I would expect someone whose authentication was OIDC-based to be similarly dismissive if you told them you only would do SAML.)

    1. TZubiri · · focus · HN ↗
      It's a matter of perspective yes.

      If you are a vendor, you should have SAML support unless you are early (and can only support 1 standard), or you are highly opinionated.

      If you are a consumer instead, you will only be using one standard, so you HAVE to chose 1 and not the others.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.