Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

website/blogs: blog about sso tax #7202

Merged
merged 4 commits into from Oct 18, 2023
Merged

website/blogs: blog about sso tax #7202

merged 4 commits into from Oct 18, 2023

Conversation

tanberry
Copy link
Contributor

this week's blog about security taxes

@tanberry tanberry requested a review from a team as a code owner October 17, 2023 20:20
@netlify
Copy link

netlify bot commented Oct 17, 2023

Deploy Preview for authentik-storybook ready!

Name Link
🔨 Latest commit aa9ebe1
🔍 Latest deploy log https://app.netlify.com/sites/authentik-storybook/deploys/6530614e6d46460008c08872
😎 Deploy Preview https://deploy-preview-7202--authentik-storybook.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@authentik-automation
Copy link
Contributor

Images automagically compressed by Calibre's image-actions

Compression reduced images by 5.9%, saving 152.29 KB.

Filename Before After Improvement Visual comparison
website/blog/2023-10-18-taxed-out-of-security/image1.png 761.57 KB 687.82 KB -9.7% View diff
website/blog/2023-10-18-taxed-out-of-security/image2.png 1.32 MB 1.26 MB -4.1% View diff
website/blog/2023-10-18-taxed-out-of-security/image3.png 73.65 KB 72.38 KB -1.7% View diff
website/blog/2023-10-18-taxed-out-of-security/image4.png 389.62 KB 368.04 KB -5.5% View diff

186 images did not require optimisation.

@netlify
Copy link

netlify bot commented Oct 17, 2023

Deploy Preview for authentik ready!

Name Link
🔨 Latest commit 734e385
🔍 Latest deploy log https://app.netlify.com/sites/authentik/deploys/652eec8b60e95d0008d98460
😎 Deploy Preview https://deploy-preview-7202--authentik.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 96 (no change from production)
Accessibility: 90 (no change from production)
Best Practices: 100 (no change from production)
SEO: 80 (no change from production)
PWA: -
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify site configuration.

@netlify
Copy link

netlify bot commented Oct 17, 2023

Deploy Preview for authentik ready!

Name Link
🔨 Latest commit aa9ebe1
🔍 Latest deploy log https://app.netlify.com/sites/authentik/deploys/6530614e46fee10009ca4790
😎 Deploy Preview https://deploy-preview-7202--authentik.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 95 (🟢 up 1 from production)
Accessibility: 90 (no change from production)
Best Practices: 100 (no change from production)
SEO: 80 (no change from production)
PWA: -
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify site configuration.

@codecov
Copy link

codecov bot commented Oct 17, 2023

Codecov Report

All modified lines are covered by tests ✅

Comparison is base (15be83c) 92.64% compared to head (aa9ebe1) 92.59%.
Report is 19 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #7202      +/-   ##
==========================================
- Coverage   92.64%   92.59%   -0.05%     
==========================================
  Files         584      584              
  Lines       28680    28707      +27     
==========================================
+ Hits        26570    26582      +12     
- Misses       2110     2125      +15     
Flag Coverage Δ
e2e 50.65% <ø> (-0.55%) ⬇️
integration 26.12% <ø> (-0.02%) ⬇️
unit 89.62% <ø> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

see 10 files with indirect coverage changes

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@github-actions
Copy link
Contributor

github-actions bot commented Oct 17, 2023

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-blog-sso-tax-1697575055-270138b
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

For arm64, use these values:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-blog-sso-tax-1697575055-270138b-arm64
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
image:
    repository: ghcr.io/goauthentik/dev-server
    tag: gh-blog-sso-tax-1697575055-270138b

For arm64, use these values:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
image:
    repository: ghcr.io/goauthentik/dev-server
    tag: gh-blog-sso-tax-1697575055-270138b-arm64

Afterwards, run the upgrade commands from the latest release notes.

Copy link
Contributor

@kensternberg-authentik kensternberg-authentik left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm going to approve, but I would recommend fixing that one ungrammatic sentence. (And, yes, Chrome, if "ungrammatical" is a word in your dictionary then "ungrammatic" ought to be as well.)


Security experts widely agree that SSO is essential for security, but multi-factor authentication is more basic still, making the act of charging extra for MFA even more egregious. But, as we saw in the intro, companies like Box charge extra for multiple authentication methods.

The user tax is more subtle. Companies are charging a user tax when they charge exorbitant amounts more per additional user that customers feel motivated to share the credentials to one account. To be clear, many companies charge on a per-user or per-seat basis (including Authentik), so you can’t call it a tax until the additional costs really become exorbitant.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think I could diagram that second sentence. It doesn't structure in my head well.

Copy link
Contributor Author

@tanberry tanberry Oct 18, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Which sentence exactly do you want edited, @kensternberg-authentik ?

Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com>
@tanberry tanberry merged commit d48342f into main Oct 18, 2023
66 of 67 checks passed
@tanberry tanberry deleted the blog-sso-tax branch October 18, 2023 23:13
kensternberg-authentik added a commit that referenced this pull request Oct 19, 2023
* main: (57 commits)
  stages/email: Fix query parameters getting lost in Email links (#5376)
  core/rbac: fix missing field when removing perm, add delete from object page (#7226)
  website/integrations: grafana: add Helm and Terraform config examples (#7121)
  web: bump @types/codemirror from 5.60.11 to 5.60.12 in /web (#7223)
  translate: Updates for file web/xliff/en.xlf in zh_CN (#7224)
  translate: Updates for file web/xliff/en.xlf in zh-Hans (#7225)
  website/blogs: blog about sso tax (#7202)
  web: Application wizard v2 with tests (#7004)
  web: bump API Client version (#7220)
  core: bump goauthentik.io/api/v3 from 3.2023083.7 to 3.2023083.8 (#7221)
  providers/radius: TOTP MFA support (#7217)
  web: bump API Client version (#7218)
  stage/deny: add custom message (#7144)
  docs: update full-dev-setup docs (#7205)
  enterprise: bump license usage task frequency (#7215)
  web: bump the storybook group in /web with 5 updates (#7212)
  web: bump the sentry group in /web with 2 updates (#7211)
  Revert "web: Updates to the Context and Tasks libraries from lit. (#7168)"
  web: bump @types/codemirror from 5.60.10 to 5.60.11 in /web (#7209)
  web: bump @types/chart.js from 2.9.38 to 2.9.39 in /web (#7206)
  ...
kensternberg-authentik added a commit that referenced this pull request Oct 19, 2023
* main: (119 commits)
  stages/email: Fix query parameters getting lost in Email links (#5376)
  core/rbac: fix missing field when removing perm, add delete from object page (#7226)
  website/integrations: grafana: add Helm and Terraform config examples (#7121)
  web: bump @types/codemirror from 5.60.11 to 5.60.12 in /web (#7223)
  translate: Updates for file web/xliff/en.xlf in zh_CN (#7224)
  translate: Updates for file web/xliff/en.xlf in zh-Hans (#7225)
  website/blogs: blog about sso tax (#7202)
  web: Application wizard v2 with tests (#7004)
  web: bump API Client version (#7220)
  core: bump goauthentik.io/api/v3 from 3.2023083.7 to 3.2023083.8 (#7221)
  providers/radius: TOTP MFA support (#7217)
  web: bump API Client version (#7218)
  stage/deny: add custom message (#7144)
  docs: update full-dev-setup docs (#7205)
  enterprise: bump license usage task frequency (#7215)
  web: bump the storybook group in /web with 5 updates (#7212)
  web: bump the sentry group in /web with 2 updates (#7211)
  Revert "web: Updates to the Context and Tasks libraries from lit. (#7168)"
  web: bump @types/codemirror from 5.60.10 to 5.60.11 in /web (#7209)
  web: bump @types/chart.js from 2.9.38 to 2.9.39 in /web (#7206)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants