<story><title>Ask HN: What&apos;s the best corporate password manager?</title><text>My company of ~25 people needs to manage access to probably ~100 services our employees use everyday and I assume some kind of password manager which I can centrally manage is the way to go.&lt;p&gt;I often hear things on here about products that claim to be secure but aren&amp;#x27;t -- what password manager is considered reliable and secure? Which do you use?&lt;p&gt;Thank you!</text></story><parent_chain><item><author>bpicolo</author><text>&amp;gt;  manage access to probably ~100 services our employees use everyday&lt;p&gt;Is single sign-on an option, instead? Something like Okta is a much better experience for less technical users (and, well, engineers too) where possible, and also lets you trivially manage credentials access as people on&amp;#x2F;off board (no need to rotate credentials if you&amp;#x27;re worried folk may have written them down on paper somewhere with malicious intent). That said, it doesn&amp;#x27;t help folk with personal credentials management, which can be useful for good security policy in addition.&lt;p&gt;1password is my favorite to have around for services that don&amp;#x27;t support SSO. I like it so much I pay for a family account, even.</text></item></parent_chain><comment><author>atonse</author><text>The problem with SSO isn&amp;#x27;t technical, but that most SaaS products I&amp;#x27;ve seen only support SSO for their enterprise tiers.&lt;p&gt;Otherwise, thanks to many providers like Okta and others, SSO should really be a feature provided to smaller tiers nowadays.&lt;p&gt;We&amp;#x27;re a small business (2 founders, 3 contractors), and we&amp;#x27;d love to use SSO for everything. But we&amp;#x27;re too small to afford enterprise tiers for things like Slack, Gitlab, etc.&lt;p&gt;Hopefully this trickles down eventually.&lt;p&gt;Update: I&amp;#x27;d like to add that we provide a SaaS product as well, and have considered adding SSO to the enterprise tier but after much research we can&amp;#x27;t really find a good reason to restrict it (apart from &amp;quot;everyone else is doing it&amp;quot;, and potential manual config).&lt;p&gt;But both SAML and OpenID connect have discovery protocols. Again, this CAN technically be self-configured by the right customer. But then, maybe the solution is to have a one-time config fee, rather than require a certain tier.</text></comment>
<story><title>Ask HN: What&apos;s the best corporate password manager?</title><text>My company of ~25 people needs to manage access to probably ~100 services our employees use everyday and I assume some kind of password manager which I can centrally manage is the way to go.&lt;p&gt;I often hear things on here about products that claim to be secure but aren&amp;#x27;t -- what password manager is considered reliable and secure? Which do you use?&lt;p&gt;Thank you!</text></story><parent_chain><item><author>bpicolo</author><text>&amp;gt;  manage access to probably ~100 services our employees use everyday&lt;p&gt;Is single sign-on an option, instead? Something like Okta is a much better experience for less technical users (and, well, engineers too) where possible, and also lets you trivially manage credentials access as people on&amp;#x2F;off board (no need to rotate credentials if you&amp;#x27;re worried folk may have written them down on paper somewhere with malicious intent). That said, it doesn&amp;#x27;t help folk with personal credentials management, which can be useful for good security policy in addition.&lt;p&gt;1password is my favorite to have around for services that don&amp;#x27;t support SSO. I like it so much I pay for a family account, even.</text></item></parent_chain><comment><author>blowski</author><text>Certainly for a company between 25 people, 1Password is great. As an added bonus, you can give staff a 1Password families account for free.&lt;p&gt;Not totally relevant to the question, but how well does it scale to enterprise? I found the need to create and manage individual access to vaults to be complicated, even at a few users. I can&amp;#x27;t imagine how you&amp;#x27;d manage 1000s of passwords accessed by combinations of 1000s of users, including third-parties, contractors, etc. Are there any better password management solutions in the enterprise space?</text></comment>