This is the conversation I plan to have with Okta sales soon. Wait till you see how easy AI makes it to switch to Entra ID or anyone else. It’s tedium not even problem solving.
My problem with the SSO providers is not the technical part, thats "easy". Its the coordinate with the 200+ external and internal vendors / support to redeploy the SSO part which is time consuming. I always say its a ~3 year project, which can be done in 6 months with the right amount of resources, especially if the platform has been running for years.
Honestly, these days probably less friction switching out Redis or Elasticsearch (backend) than changing LLM provider (human facing).
Fable is seriously good enough now to, in a 20k line project, take "replace Mongoengine with raw PyMongo" and not screw anything up.