Hacker News new | ask | show | jobs
by Too 1567 days ago
Hah. If you worry about malicious employees I can tell you that SSO is the opposite of a solution.

Most SSO integrations have very bad Single-Sign-Out design, if any at all. So as long as the token in your session has not expired yet, you have full access to resources, even if account is blocked in the Id Provider.