[vptr]

Agree. I sell simple sass product myself and offer SAML to everyone. I view security as a basic right, not something to be used to extract more money for. Charging for additional features is ok, charging for keeping your account more secure is just plain wrong.

[hirako2000]

But saml is for integration (SSO). Github provides 2fa for free.

What enterprise is paying is the convenience, not security itself.

[tptacek]

SSO is a security feature, not a convenience. It happens to be a security feature that comes bundled with some extra convenience, but it's not the only one like that; so are password managers.