August 2020 Summaries

Dropbox successfully moved upmarket and secured big enterprise customers by building features such as admin controls and integrations that made their product more appealing to these larger companies. The land-and-expand strategy, which involves selling to developers and business users first before targeting IT administrators, was key to this success. However, the development of enterprise-ready features like authentication, access controls, audit trails, and compliance with industry standards was crucial in enabling Dropbox to close deals with major enterprises.

This post discusses UI/UX best practices for IdP (Identity Provider) and SP (Service Provider) initiated Single Sign-On (SSO) flows, which are essential in modern web applications. It covers two unique flows - IdP-initiated SSO and SP-initiated SSO. The article provides examples of how various companies implement these flows, such as subdomaining tenants, separating email and password screens, and dynamically hiding password fields for domains with SSO enabled. While adding SSO doesn't eliminate the need for usernames and passwords entirely, it significantly improves the user experience by allowing users to sign in using their existing credentials from popular identity providers like Google or Twitter.