New top contender for the stupidest SP SSO mechanism

[Cantor, Scott]

PingOne is a pretty common trick I've run into, multiple times. It just lets the company integrate with one IdP, basically a commercial proxy. Like all proxies, its goal is to move work around, and if you're the work pusher it looks awesome and if you're the pushee, it's not as hot.

I don't imagine it's actually all that tough to integrate, it's more or less like any self-managed SP, probably better than a lot of them.

The problem with PingOne is that it requires a click-through license that is in general illegal to agree to for most state universities.

When we raised that with a vendor, they happily told us we were the only ones who ever claimed that (including other Ohio publics).

-- Scott