search

robchahin / sso-wall-of-shame

A list of vendors that treat single sign-on as a luxury feature, not a core security requirement.
https://sso.tax
Apache License 2.0
619 stars 288 forks source link

MFA.TAX #456

Closed bradwood closed 4 months ago

bradwood commented 4 months ago

Are we lumping MFA (2FA) and SSO together in one bucket here? Or are these considered separate taxes?

techdarko commented 4 months ago

Just SSO tax! While MFA is for everyone, SSO is focused on professional/business usage hence the scope just for SSO. Not sure if there is an MFA shaming site yet...

robchahin commented 4 months ago

https://2fa.directory/ preceded sso.tax and looks very different / has different goals, but is the closest thing I know of. If a SaaS vendor implements SSO then they don't need to implement MFA, which is one of a few reasons this site doesn't opine on it.

bradwood commented 4 months ago

thanks all -- makes sense! :pray: