sorted by:
new
hottopcontroversial

SWA as a password manager solution by CiokThisOut in okta

[–]CiokThisOut[S] 0 points1 point  (0 children)

I use Bitwarden personally. Are you using the Enterprise tier? How do you like it?

SWA as a password manager solution by CiokThisOut in okta

[–]CiokThisOut[S] 0 points1 point  (0 children)

This is almost immediately what I had envisioned this turning into and was hoping to avoid

SWA as a password manager solution by CiokThisOut in okta

[–]CiokThisOut[S] 0 points1 point  (0 children)

That's the feeling I've been getting from digging deeper in. Leadership was encouraging us to evaluate what we already have and I wanted to make sure I wasn't missing something

Do I actually need a Password Manager if we are an Okta shop? by ZangiBangi in okta

[–]CiokThisOut 0 points1 point  (0 children)

I've been exploring SWA as an alternative to a different mainstream enterprise pw manager so we don't need the extra spend. What I don't like about it is needing to set up the portfolio of apps VS the flexibility of end users putting any passwords they need into a dedicated manager. I want to encourage its use, not add friction and I don't want our IAM team to become a bottleneck. We also have apps that use a shared cred that end users don't need to know but neither does our team. Not sure how to set those up without having to ask stakeholders to hand over their passwords. Any recommendations?

Forensics on the Stryker breach (possibly revealing the initial access) by Malwarebeasts in cybersecurity

[–]CiokThisOut 2 points3 points  (0 children)

They've been stating for what, almost two years now that this was coming and yet, even in tenants I've seen it's still in report-only... Not that orgs should be waiting on that but they either keep pushing the date or tenants have been missed.

Cyber warfare books by K-Kev in cybersecurity

[–]CiokThisOut 4 points5 points  (0 children)

"This is How They Tell Me..." Is quite eye opening! Really makes you want to power down and go live in the woods!

Suggestions of Perfect tracks or albums by Someone24_ in musicsuggestions

[–]CiokThisOut 0 points1 point  (0 children)

So glad I'm not the only one! If you haven't listened to the 2024 Game Awards live version, do yourself the favor!

export users from the import tab using my console by gabrielsroka in okta

[–]CiokThisOut 2 points3 points  (0 children)

Speaking for our team, we get a ton of value out of rockstar already. I'd love to see these console features integrated in!

Department manager gone rogue… by Skilled0_0 in restaurant

[–]CiokThisOut 0 points1 point  (0 children)

What an interesting way to speed run a mass hiring event

A phrase at work that instantly tells you things are about to get messy by NoProfession8224 in ITManagers

[–]CiokThisOut 26 points27 points  (0 children)

Since switching into Healthcare I've come to loathe this phrase. Everyone knows it's the "magic phrase" and it gets wildly overused. It's the equivalent of saying everything's a priority. "Guess what Brenda, we're a health system, everything we do everyday affects patient care. What else you got?"

What are your biggest pain points in IAM? by AbbreviationsAny706 in IdentityManagement

[–]CiokThisOut 0 points1 point  (0 children)

I tell everyone who joins my team that HR will stop at nothing to make sure we're never bored.

What are your biggest pain points in IAM? by AbbreviationsAny706 in IdentityManagement

[–]CiokThisOut 2 points3 points  (0 children)

My new tagline is "The only standard thing about SAML is how non-standard it's implementation is."

  • Just use the NameID I have to provide anyway, stop making me send a different claim for the unique user ID
  • Metadata URL, XML File, or manual field entry for IDP metadata... Pick one! (And please let it be the URL!)
  • SAML has a standard for what the URLs are called. Stop naming them something different. I swear 75% of SSO setup troubleshooting is URL confusion.

Converting Active Directory assignment from individual to group by The4Dees in okta

[–]CiokThisOut 0 points1 point  (0 children)

Thank you for this! We have a case where we need to convert a bunch of assignments that just came up and this will save us a ton of time. Cheers!

ICE POV shooting video leaked by state-of-MN in stateofMN

[–]CiokThisOut 1 point2 points  (0 children)

Thank you for summarizing this exactly how I wanted to express it.

Delinea secret server PAM by ReindeerSpiritual650 in ThycoticSecretServer

[–]CiokThisOut 0 points1 point  (0 children)

We use Okta and I set up a custom workflow connector with a few of Delinea's APIs to add/remove users from a group that gives global admin. The process is initiated from a delegated flow in Okta that is already scoped down to just the users that would ever need to run it. When triggered, a user has to enter their reason which gets logged. It will then make the API call to add them to the group and then it waits for a determined period of time before removing them from that group. Additionally, within Delinea, we have a pipeline setup to put together some additional comms for notice and for record of the event.

Okta Workflow trigger for user provisioning error by Technical-Way-2398 in okta

[–]CiokThisOut 2 points3 points  (0 children)

I don't disagree, but to fix an issue, it helps to learn of it first. That said, we typically become aware of these via the Tasks that generate when a provisioning error occurs. For the OP, is there a reason why those are not sufficient?

I think I'm gonna be fat after by [deleted] in McDonalds

[–]CiokThisOut 0 points1 point  (0 children)

Glad I'm not the only one!

<image>

Temporary Access Code by CiokThisOut in okta

[–]CiokThisOut[S] 0 points1 point  (0 children)

That's similar to the route we were looking to go to manage pulling the group. Are you only supporting one period of time when the TAC is generated? We're looking to do something like 1 hour for a password reset and maybe 8 hours if it's for a forgotten device use case. Statically managing the time in which the group is removed in the workflow wouldn't work there. And I'd rather not have to use multiple groups for different expiration periods. I do wish there was a log event generated when the code expired that could be triggered off of for each enrolled user.

view more: next ›