I should check out the Marin shop. Toyota SF was really good service but their prices/charges are outrageous. I ended up going to ToyShop which isn't too far from the dealership and they are solid (they work primarily on Toyotas hence ToyShop)
Yea. This pattern is called BeyondCorp or Zero Trust. Google was the first company to pioneer it but adopting this architecture internally. Only now companies are slowly moving to this and vendors are creating products and services to support this architecture.
Seems like a move to take on Microsoft Teams. This is something that these independent software vendors will need to do in order to take on Microsoft: integrate and enable a best of breed world. Its not really a great experience if I buy Slack, Okta, Box/Dropbox, GSuite if I don't have a seamless and integrated and experience throughout. The only way is to build a integrated ecosystem and enable these horizontal use-cases.
This isn't the Enterprise. Did you take a look at the people who run Patreon? I'm sure they are more shattered that people lost patrons than the fact that Patreon themselves lost money. They had good intentions - to get the creators paid 95% but they executed it poorly.
But would you though? They only integrate with AD and looks like they are trying to address a gap that AWS has with managing access to resources. These other IdaaS have a lot more functionality.
SAML IdP is the entity that stores the identities (source of truth), SSO provider can be the same IdP or a 3rd party entity that can federate this identity to different service providers (apps).