[jroes]

I agree that orgs of all sizes should use SSO. The pricing should scale appropriately.

But as we have seen, companies are not doing enough to secure the sustainability of the open source software they rely on for their businesses, and I think a balance needs to be struck.

[rlnorthcutt]

One thing that Appsmith does is to offer Google and Github SSO for the open source version, and then SAML, OIDC, OAuth2 for the business edition. It can be very difficult to figure out where to draw the line, but I think looking at the needs of the individual developer vs a business team of devs is a good start.

[eropple]

They are not. I agree.

SSO isn't where to try to bleed that pig though, I think, to the point where for team-based systems it is probably more proper to disallow anything else (and maybe make them pay for guest access outside of their domain!).