[hn_throwaway_99]

I hadn't seen sso.tax before, thank you thank you thank you, it is so true!

Glad to see Github there, it is so egregious in its treatment of SSO. First, I would gladly pay additional for SSO integration in Github. But a 425% increase!! It's absurd and insane, and given how there are limitations in other security features I can require (I can't, for example, require hardware token authentication, only generic 2FA), this is borderline criminal.

Pay for additional, enterprise-specific features, I totally understand. But as this site you posted so eloquently describes, when the option is "have shittier security" unless you pay an obscene, bundled markup. This is an area where I do think regulation should be required, not so much at features or pricing but that additional security features shouldn't be permitted to be bundled in, or that SaaS product should have some amount of liability when they don't provide unbundled, table-stakes security features.