Okta

Pros

• Implemented Okta Device Trust and centralized 50+ applications using SSO/SCIM Currently implementing Okta Workflows integrated with Jamf
• Security is much tighter than AD, it's al pre-auth vs post-auth.
• okta handles the cloud side well but the legacy apps keep pulling us back to ad.
• Best though is to use a single sign on system like google, okta, openid, etc. Let them handle the security.
• IDPs like Okta support this for their SDKs.

Cons

• Okta is incredibly over priced and not worth what they offer.
• Not only is Okta not a value add in 99% of these cases but can be an active negative because it's more to learn, more to maintain, and more that can break.
• I’ve not even entertained Okta because I don’t see the value add for companies that are already heavily in the MS ecosystem.
• Looking at it recently, I would never want to push this on a company. I don't know how this friend feels about it now, but if he still likes it, I'd seriously reconsider their competence in this field.
• Okta is expensive, especially when lots of companies already have o366 and Microsoft has caught up on a lot of features.