diff --git a/_sass/custom.scss b/_sass/custom.scss index 38ac5358..72c3f395 100644 --- a/_sass/custom.scss +++ b/_sass/custom.scss @@ -8,9 +8,21 @@ table img { margin-bottom: 0; } -table td.actions { - vertical-align: middle; - width: 25px; +table { + + td.actions { + vertical-align: middle; + width: 25px; + } + + td.centered { + text-align: center; + } + + td.small { + font-size: 0.8em; + white-space: nowrap; + } } // https://www.w3schools.com/css/css_tooltip.asp diff --git a/friends-of-sso.md b/friends-of-sso.md index 9e9d4305..ff92eaba 100644 --- a/friends-of-sso.md +++ b/friends-of-sso.md @@ -65,13 +65,13 @@ Best practice for vendors to keep their customers secure would be offering both {{ vendor.scim_starting_on_plan }} - + {% include vendor_free_sso_providers.html providers=vendor.free_sso_providers %} - + {% include vendor_pricing_sources.html pricing_sources=vendor.sources %} - {{ vendor.updated_at }} + {{ vendor.updated_at }} {% include vendor_edit_link.html vendor_path=vendor.path vendor_name=vendor.name %} diff --git a/index.md b/index.md index 0ed8c94d..68af0865 100644 --- a/index.md +++ b/index.md @@ -61,7 +61,7 @@ Imagine buying a car and the manufacturer asks for an extra payment to unlock 10 {% include vendor_logo.html vendor_url=vendor.vendor_url vendor_name=vendor.name %} {{ vendor.name }} - + {% if sso_increase == "unknown" %}
??? Pricing is not transparent and unknown. Often vendors ask you to call them to get a quote. @@ -70,22 +70,22 @@ Imagine buying a car and the manufacturer asks for an extra payment to unlock 10 {{ sso_increase }}% {% endif %} - + {% if vendor.base_pricing == "unknown" %} ??? {% else %} {{ vendor.base_pricing | format: vendor.currency}} {% endif %} - + {% if vendor.sso_pricing == "unknown" %} ??? {% else %} {{ vendor.sso_pricing | format: vendor.currency}} {% endif %} - {{ vendor.pricing_scheme }} - + {{ vendor.pricing_scheme }} + {% include vendor_free_sso_providers.html providers=vendor.free_sso_providers %} @@ -93,10 +93,10 @@ Imagine buying a car and the manufacturer asks for an extra payment to unlock 10 {{ vendor.notes }}
- + {% include vendor_pricing_sources.html pricing_sources=vendor.pricing_sources %} - {{ vendor.updated_at }} + {{ vendor.updated_at }} {% include vendor_edit_link.html vendor_path=vendor.path vendor_name=vendor.name %} diff --git a/why.md b/why.md index 83689a98..3ff12185 100644 --- a/why.md +++ b/why.md @@ -4,6 +4,8 @@ description: Why does SSOtax.org exist and what is it? order: 3 --- +## Why the project is needed + [**SSOtax.org**](http://ssotax.org) is an open source project to raise awareness how important SSO is as a core security requirement and that it should be available for everyone! It is maintained by the IT and InfoSec community. Single sign-on (SSO) is a mechanism for outsourcing the authentication (via OpenID Connect, SAML) to a third party identity provider, such as Google, Azure AD, Okta, etc. @@ -14,7 +16,7 @@ Companies rely on SSO to centrally lock down any employee access at the time of If a vendor takes your security seriously they shouldn’t charge for a security feature that’s already developed. It would be unheard of for a car manufacturer to deliver your car but asking for an expensive software upgrade to unlock 100% of braking performance. SaaS vendors are essentially doing the same by locking existing security features behind an expensive paywall. Many vendors charge 2x, 3x, or 4x the base product pricing for access to SSO! ----- +## Who is behind SSOtax.org? I learned myself about the problem in the past while introducing Okta in my previous company and not being able to connect it to all existing SaaS as SSO was behind a pay wall. @@ -22,6 +24,8 @@ When I was talking to CTOs and Security Leads about SaaS security, often the ter The SSO Tax was one of the reasons for starting [AccessOwl](https://www.accessowl.io) - a SaaS Provisioning and Governance platform. My co-founder Philip and I were frustrated that access management was turned into a product category solely accessible to large enterprises. In todays day and age managing your employee’s access to SaaS should not be considered a luxury product anymore. +## The original SSO.tax + As the [original project](https://sso.tax) was not maintained for over a year and several reach outs to the maintainer were unsuccessful, I decided to [fork](https://github.com/ssotax/ssotax), updating the data and actively processing PRs to advance the core idea. At the same time it was a great opportunity to [integrate](https://github.com/robchahin/sso-wall-of-shame/issues/100) [community](https://github.com/robchahin/sso-wall-of-shame/issues/36) [feedback](https://github.com/robchahin/sso-wall-of-shame/issues/140) and improve the overall page. **The objective extends beyond shaming vendors by also [applauding those who genuinely value their customers’ security](friends-of-sso)!**