[stouset]

If your CISO wants to use SAML for anything, fire your CISO.

Frankly I’d suggest the same thing about Okta but as bad as they are whatever you do to avoid them would probably be worse in practice.

[paulddraper]

I gather that you've fired every CISO you've ever had.

[stouset]

If I’d been in a position to, I would have. Except for Sam Quigley who was the fucking best.

[tptacek]

Sam is great.

[NewJazz]

Do you mean chooses it over OIDC, or even when a product can only do SSO via SAML?