[shadowbanned4]

I worked for the largest company in Canada who handled billions of dollars. You can make your decision but they won't do anything.

[clarkmcc]

I work on the cloud security team for a Fortune 500 company. They won’t even consider a third party service that doesn’t provide a enterprise SSO/SAML integration with our auth provider. I suspect this is the more common approach for enterprise level companies given that at 40k+ employees it’s just not possible to manage employee auth across hundreds of services.

[mooreds]

They still used basic auth across all their apps?

[shadowbanned4]

No. They used Oauth. I wrote their entire Oauth system. And it was a nightmare reading through Oauth/OIDC specs for something that could be handled trivially with http basic auth.