robchahin / sso-wall-of-shame

A list of vendors that treat single sign-on as a luxury feature, not a core security requirement.
https://sso.tax
Apache License 2.0
619 stars 288 forks source link

Add Plane.so #473

Open BazlTech opened 2 months ago

BazlTech commented 2 months ago

What is the vendor's name? Plane.so

What is the vendor's pricing site? https://plane.so/pricing

What is the base pricing? Use the lowest tier that looks sane for a small business customer, not free or personal tiers. $5/usr/yr

What is the minimum pricing for SSO support? Must call for "Custom pricing"

Does this pricing info come from a quote or other non-public source? Probably not

Are there any caveats we should list in the footnotes? Not that I'm aware of.

theparthacus commented 2 months ago

i am a consultant for Plane, so i can confirm the issue description above is inaccurate.

  1. Google and GitHub SSO are free for everyone.
  2. $5 per user per month is a higher-tier plan than One, which offers custom SSO for self-hosted instances.
  3. One is $699 when pre-ordered and $799 post-launch. It offers in addition to custom SSO features,
    • 100 users
    • Unlimited projects and issues
    • Other plan-specific features
    • SSO pricing as a function of the net price for this plan is way, way below 10%.
      1. When other plans kick in, our SSO pricing as a function of overall pricing of any plan will be well below 10%.
BazlTech commented 2 months ago

i am a consultant for Plane, so i can confirm the issue description above is inaccurate.

1. Google and GitHub SSO are free for everyone.

2. $5 per user per month is a higher-tier plan than [One](https://plane.so/one), which offers custom SSO for self-hosted instances.

3. One is $699 when pre-ordered and $799 post-launch. It offers in addition to custom SSO features,

   * 100 users
   * Unlimited projects and issues
   * [Other plan-specific features](https://x.com/planepowers/status/1779886212674998650)
   * SSO pricing as a function of the net price for this plan is way, way below 10%.

4. When other plans kick in, our SSO pricing as a function of overall pricing of any plan will be well below 10%.

So, for anyone NOT wanting to use Google or GitHub Auth, you paywall their ability to use SSO within their own infrastructure.

The fact remains, running your own SSO from within your own environment COSTS THE DEVELOPER NOTHING. This is a very dangerous trend of hiding security features already built in to a product behind a paywall.

projx commented 3 days ago

Perhaps relevant to this, some kind soul did implement SSO for Plane, but it was rejected, Justification and reasoning was etc was documented - see https://github.com/makeplane/plane/pull/3341

so is any further justfication needed?