Hacker News new | ask | show | jobs
by butvacuum 10 days ago
I don't think it's about security. It's about fobing off password resets on somebody else.
1 comments

This is market-dependent. We offer email OTP login for small business customers because it is “poor man’s SSO”. You’re basically validating the recipient is still at the company, able to receive at their work email.

Larger customers have IT staff and set up OIDC or SAML with us. We don’t add an SSO tax.