[{"data":1,"prerenderedAt":542},["ShallowReactive",2],{"project-35524328":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":34,"aspects":35,"strip":45,"post_text":47,"what":48,"said":91,"maker_in_thread":208,"shape":220,"grid":225,"attempts":505,"same_week":506,"maker_shows":46,"maker_hidden":535,"reader_version":536,"card":537},"35524328","OpenOwl","Skip the SSO Tax, access your user data with OSS","title","Show HN: Skip the SSO Tax, access your user data with OSS","https:\u002F\u002Fgithub.com\u002FAccessOwl\u002Fopen_owl","github.com","mathiasn",1681216849,2023,220,103,249,3109,9,"notable","infrastructure","access auditing","cli",[24,25,26,27],"sso tax","user access review","saas permissions","scim alternative","debated",0.01,{"positive":31,"neutral":32,"mixed":33,"critical":31},8,11,1,28,{"docs":36,"idea":37,"design":39,"pricing":41,"privacy":42,"execution":44},{"positive":33,"critical":33},{"positive":38,"critical":38},5,{"positive":33,"critical":40},0,{"positive":33,"critical":40},{"positive":40,"critical":43},2,{"positive":40,"critical":40},[40,40,40,40,40,40,40,40,46,40,40,40,40,38,46,33,33,33,33,46,40,33,46,38,46,40,40,38,46,46,33,40,33,40,40,40,38,38,40,38],3,"As the former CTO of an Insurtech and Fintech startup I always had the “pleasure” to keep regulators and auditors happy. Think of documenting who has access to what, quarterly access reviews, yearly audits and so on…\n\nLike many others we couldn’t justify the Enterprise-plan for every SaaS tool to simply get access to SSO and SCIM\u002FSAML APIs. For Notion alone the cost would have nearly doubled to $14 per user per month. That’s insane! Mostly unknown to people, SSO Tax also limits access to APIs that are used for managing user access (SCIM\u002FSAML).\n\nThis has proven to be an incredibly annoying road",{"problem":49,"audience":55,"pricing":59,"motivation":60,"time_to_build":59,"stack":64,"openness":88,"stage":89,"team_size":90},{"value":50,"source":51,"evidence":52},"Enterprise-only SSO\u002FSCIM APIs make it hard to export user lists and permissions from SaaS tools","maker",[53],{"id":54},"post",{"value":56,"source":51,"evidence":57},"IT managers and developers handling access reviews and audits",[58],{"id":54},null,{"value":61,"source":51,"evidence":62},"Former CTO needed to avoid SSO tax for access reviews and audits",[63],{"id":54},[65,75,79,84],{"value":66,"source":51,"evidence":67},"Elixir",[68,72],{"id":69,"by":70,"text":71},"35530501","Nezteb","As a dev who primarily uses Elixir, I was excited to see that you built OpenOwl with it! Out of curiosity, what made you choose Elixir? I wanted to use Elixir to build my PDF…",{"id":73,"by":11,"text":74},"35536277","Oh yeah, Elixir is just amazing \u003C3. We use it for our commercial platform accessowl.io. Parts of OpenOwl are originated from there. It was the fastest way to push OpenOwl out.…",{"value":76,"source":51,"evidence":77},"Playwright",[78],{"id":73,"by":11,"text":74},{"value":80,"source":81,"evidence":82},"Node","commenter",[83],{"id":69,"by":70,"text":71},{"value":85,"source":51,"evidence":86},"Docker",[87],{"id":73,"by":11,"text":74},"open_source","beta","unknown",{"praise":92,"objections":119,"requests":143,"questions":169,"alternatives":182},[93,108],{"value":94,"source":81,"evidence":95},"Good idea that addresses a real pain point",[96,100,104],{"id":97,"by":98,"text":99},"35526621","OliverJones","I have to say, I understood what this is really fast when I saw the README. It's really a great idea. I'dve been all over it before I :-) :-) retired. It's going to save growing…",{"id":101,"by":102,"text":103},"35525686","dbdoskey","I think this is an amazing idea! I am struggling with a similar situation now. Anything that will allow to semi-automate this, and get a periodic report that compares this to…",{"id":105,"by":106,"text":107},"35527958","LionTamer","Love this idea - was considering trying to build something similar recently.",{"value":109,"source":81,"evidence":110},"Recipes approach makes adding integrations easy",[111,115],{"id":112,"by":113,"text":114},"35525979","goldenCeasar","Hey mathiasn, I totally feel your pain! I work with the same kind of solution and know how everything can get way more complex than people think, I really liked the \"recipes\"…",{"id":116,"by":117,"text":118},"35525244","lozenge","This is cool, in that it might encourage SaaS providers to reduce the SSO tax. Discouraging security affects all of us whose data is held by other companies (ie everybody). I'm…",[120,127,135],{"value":121,"source":81,"evidence":122},"Requires admin account with 2FA disabled, which is risky",[123],{"id":124,"by":125,"text":126},"35527931","hnlmorg","I really want to like this but the limitations described, requiring an admin account with 2FA disabled, makes this more risky then not using it at all. Until those limitations…",{"value":128,"source":81,"evidence":129},"Scraping-based login flows seem fragile and limited to 7 vendors",[130,131],{"id":116,"by":117,"text":118},{"id":132,"by":133,"text":134},"35528225","somegent","I think your positioning is wrong. The problem this solves is auditing user accounts in SaaS applications. That is a great problem to be solving, and you can position yourself on…",{"value":136,"source":81,"evidence":137},"Name and positioning around SSO are misleading since it is about SCIM and audits",[138,142],{"id":139,"by":140,"text":141},"35525755","Flipflip79","I think using the term \"Skip the SSO Tax..\" has done a little disservice to you, and I understand why you chose that term, but this is more \"Skip the SCIM tax\" I think?…",{"id":132,"by":133,"text":134},[144,154,162],{"value":145,"source":81,"evidence":146},"Support SSO and API key login flows",[147,151],{"id":148,"by":149,"text":150},"35525176","cheeseblubber","The SSO part is a bit confusing since it sounds like the product is letting you download account and permissions data based on your own api key. It might be helpful if you…",{"id":152,"by":11,"text":153},"35526223","That's a good point. Indeed there is a technical focus on login flows at the moment as this seems like the hardest problem to solve. Adding API key flows makes definitely sense…",{"value":155,"source":81,"evidence":156},"Clearer README explaining purpose and listing supported services",[157,161],{"id":158,"by":159,"text":160},"35525066","dboreham","I recommend some editing of the readme to clarify the tool's purpose. Initially I thought it might be an AI-generated spoof project since the description made no sense. I think…",{"id":116,"by":117,"text":118},{"value":163,"source":81,"evidence":164},"Simple SSO proxy for self-hosted open source apps",[165],{"id":166,"by":167,"text":168},"35526054","ensignavenger","As one who self-hosts a number of Open Source applications for a small group of family and friends, I would love to have a simple SSO proxy solution. Many \"open core\"…",[170,174],{"value":171,"source":81,"evidence":172},"Why was Elixir chosen",[173],{"id":69,"by":70,"text":71},{"value":175,"source":81,"evidence":176},"How does it handle SSO, given it is not SSO",[177,178],{"id":148,"by":149,"text":150},{"id":179,"by":180,"text":181},"35525548","ThePhysicist","How does that solve the problem SSO typically solves? It seems you're trying to replace it by syncing users from different tools? That seems worse than SSO and is unlikely to be…",[183,190,194,201],{"value":184,"source":81,"evidence":185},"Resmo",[186],{"id":187,"by":188,"text":189},"35527372","CSDude","That's what we try to simplify at Resmo. We integrate with 80+ most popular tools a company might be using. Of course there are some we don't cover yet. Only 3 tools requires…",{"value":191,"source":81,"evidence":192},"Baton by ConductorOne",[193],{"id":132,"by":133,"text":134},{"value":195,"source":81,"evidence":196},"Cerby",[197],{"id":198,"by":199,"text":200},"35529267","danielmarkbruce","Have you looked at Cerby?",{"value":202,"source":81,"evidence":203},"Glim",[204],{"id":205,"by":206,"text":207},"35529042","westurner","https:\u002F\u002Fgithub.com\u002Fdoncicuto\u002Fglim : > Glim is a simple identity access management system that speaks some LDAP and has a REST API to manage users and groups \"Proxy LDAP to limit…",{"comments":209,"answered":46,"key":210},12,[211,214,217],{"id":212,"text":213},"35529202","> Typically only companies above a certain size use SSO systems, and even larger ones require it for everything. I believe it's historically grown but it's not true anymore. More…",{"id":215,"text":216},"35525937","Oh thanks a lot. I updated the repo description. You're right with what you think though :-)",{"id":218,"text":219},"35526349","Fantastic feedback. Indeed these are distinctive problems. For instance, \"SSO is expensive\" seems to be the root cause for the \"centrally manage permissions\" and \"automatic…",{"commenters":221,"max_depth":222,"maker_replies":209,"first_comment_mins":223,"lifespan_hours":224},68,10,66,62,[226,230,234,237,239,241,243,244,248,251,255,258,261,264,267,270,273,277,281,284,287,289,291,294,297,299,302,305,308,310,312,314,316,318,320,322,325,330,331,335,337,338,341,344,348,351,353,355,359,361,364,366,368,371,374,375,376,378,380,382,385,386,390,394,396,400,403,405,408,411,415,418,422,425,428,432,434,435,439,441,444,448,450,452,455,458,460,463,466,469,472,474,476,479,481,483,485,489,493,495,499,501,503],[227,40,40,228,229,40],"35525608","other\u002Fneutral\u002Fnone","kdeldycke",[231,40,40,232,233,40],"35527588","other\u002Fneutral\u002Fpricing","pwarner",[235,40,40,232,236,40],"35528538","wongarsu",[238,40,40,232,206,40],"35528942",[240,40,40,232,236,40],"35529142",[242,40,40,232,206,40],"35529196",[212,40,40,232,11,33],[245,40,40,246,247,40],"35531607","other\u002Fcritical\u002Fpricing","ehPReth",[249,40,40,246,250,40],"35534285","detaro",[252,40,40,253,254,40],"35549047","commenter\u002Fneutral\u002Fpricing","esafak",[256,40,40,232,257,40],"35534601","andersa",[259,40,40,246,260,40],"35535004","Too",[262,40,40,232,263,40],"35531589","bks",[265,40,40,253,266,40],"35532548","mananaysiempre",[268,40,40,253,269,40],"35535013","loik76ju5hyg",[271,40,40,253,272,40],"35542809","jSully24",[274,40,40,275,276,40],"35532743","other\u002Fpositive\u002Fpricing","PhLR",[278,40,40,279,280,40],"35532570","other\u002Fneutral\u002Fdocs","m463",[282,40,40,232,283,40],"35533332","AntonCTO",[285,40,40,279,286,40],"35535833","usr1106",[158,33,46,288,159,40],"project\u002Fneutral\u002Fdocs",[215,33,40,290,11,33],"maker\u002Fneutral\u002Fdocs",[292,43,40,246,293,40],"35525460","hobs",[295,43,40,232,296,40],"35527581","Spooky23",[298,43,40,232,293,40],"35528800",[300,43,40,228,301,40],"35531156","reitanqild",[303,43,40,232,304,40],"35530948","satvikpendem",[306,43,40,232,307,40],"35535031","8n4vidtmkvmk",[309,43,40,232,304,40],"35535057",[311,43,40,246,307,40],"35535209",[313,43,40,232,304,40],"35535246",[315,43,40,232,307,40],"35549539",[317,43,40,232,304,40],"35549564",[319,43,40,228,307,40],"35565042",[97,46,38,321,98,40],"project\u002Fpositive\u002Fidea",[323,46,38,324,276,40],"35528278","maker\u002Fpositive\u002Fdesign",[326,327,46,328,329,40],"35525941",4,"project\u002Fneutral\u002Fpricing","vegardx",[148,38,46,288,149,40],[332,38,33,333,334,40],"35525750","project\u002Fcritical\u002Fdocs","cj",[218,38,40,336,11,33],"maker\u002Fneutral\u002Fidea",[152,38,40,336,11,33],[124,339,33,340,125,40],6,"project\u002Fcritical\u002Fprivacy",[342,339,46,343,276,40],"35527994","maker\u002Fneutral\u002Fprivacy",[345,339,46,346,347,40],"35532447","project\u002Fneutral\u002Fexecution","tracker1",[349,339,33,340,350,40],"35528470","numbsafari",[352,339,40,343,11,33],"35529316",[198,339,33,354,199,40],"project\u002Fcritical\u002Fidea",[356,357,40,228,358,40],"35528922",7,"shellcromancer",[166,31,46,360,167,40],"project\u002Fneutral\u002Fidea",[362,31,40,228,363,40],"35530480","WirelessGigabit",[365,31,40,228,167,40],"35531262",[367,31,40,228,363,40],"35531933",[369,31,40,228,370,40],"35535093","ycmimi",[372,31,40,228,373,40],"35538496","scottydelta",[205,18,40,228,206,40],[132,222,33,354,133,40],[377,222,46,360,276,40],"35528478",[379,222,33,354,199,40],"35529289",[116,32,38,381,117,40],"project\u002Fpositive\u002Fdocs",[383,32,40,384,11,33],"35526124","maker\u002Fneutral\u002Fpricing",[101,209,38,321,102,40],[387,388,46,360,389,40],"35525279",13,"londons_explore",[391,388,40,392,393,40],"35525310","commenter\u002Fneutral\u002Fnone","toomuchtodo",[395,388,40,392,334,40],"35526150",[397,398,40,253,399,40],"35525561",14,"throwawaaarrgh",[401,398,40,253,402,40],"35526096","masterjack",[404,398,40,253,296,40],"35527668",[406,398,40,253,407,40],"35526263","varispeed",[409,398,40,253,410,40],"35526506","ebiester",[412,398,38,413,414,40],"35531600","project\u002Fpositive\u002Fpricing","m1keil",[416,398,40,417,11,33],"35537770","maker\u002Fneutral\u002Fnone",[419,420,40,228,421,40],"35534835",15,"cratermoon",[139,423,46,424,140,40],16,"project\u002Fmixed\u002Fidea",[187,426,40,427,188,40],17,"other\u002Fneutral\u002Fidea",[429,430,40,228,431,40],"35525423",18,"pulvinar",[69,433,46,417,70,40],19,[73,433,40,417,11,33],[436,437,33,354,438,40],"35525592",20,"distantsounds",[440,437,40,253,140,40],"35525887",[442,437,40,232,443,40],"35527908","danenania",[445,446,40,232,447,40],"35538468",21,"alex7734",[449,446,40,392,254,40],"35549190",[179,451,33,354,180,40],22,[453,451,40,253,454,40],"35525967","KyeRussell",[456,451,40,253,457,40],"35526134","jarym",[459,451,40,392,180,40],"35526257",[461,451,40,228,462,40],"35527386","dang",[464,451,40,253,465,40],"35526033","fiddlerwoaroof",[467,451,40,253,468,40],"35527138","michaelt",[470,451,40,392,471,40],"35528895","Steltek",[473,451,40,228,465,40],"35531750",[475,451,40,417,11,33],"35537827",[477,451,38,321,478,40],"35530355","jjav",[112,480,46,417,113,40],23,[482,480,40,417,11,33],"35526180",[484,480,40,228,113,40],"35526351",[486,487,38,321,488,40],"35525856",24,"zebroc",[490,491,40,232,492,40],"35525347",25,"api",[494,491,40,384,11,33],"35526092",[496,497,40,232,498,40],"35526568",26,"thallium205",[105,500,38,321,106,40],27,[502,500,46,417,276,40],"35528498",[504,500,40,417,11,33],"35537790",[],[507,512,517,522,526,530],{"id":508,"name":509,"points":510,"category":511},"35543668","Phind",1401,"ai",{"id":513,"name":514,"points":515,"category":516},"35470915","Tabby",627,"dev_tools",{"id":518,"name":519,"points":520,"category":521},"35471129","BrainPlsWork",329,"productivity",{"id":523,"name":524,"points":525,"category":516},"35483933","ChatGDB",189,{"id":527,"name":528,"points":529,"category":516},"35548778","twitter-api-client",183,{"id":531,"name":532,"points":533,"category":534},"35482636","NoiSQL",176,"creative",false,"v2",{"id":538,"name":5,"line":6,"ai":535,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":29,"top":18,"kw":539,"maker":11,"domain":10,"tier":19,"attempts":40,"strip":540,"url":9,"mix":541,"praise":94,"objection":121,"sub":21},35524328,[24,25,26,27],"0000000030000531111301353005331010005505",[31,32,33,31],1794036633873]