> Shhh...you can do most things with some other less perfect tool. Just because you can doesn’t mean you should.
My intent was to encourage others from not thinking "Yeah, I need all this to start a company".
Definitely! when I was first consulting I created all my invoices in OpenOffice doc files, and then emailed them out. I kept track of everything I'd sent out to clients on a spreadsheet. It was worth it because it was free. I didn't have many clients and was just starting out. Wanted to keep my expenses down.
However, after a few years I used FreshBooks, which automatically built an invoice for me. I could run reports easily. I could send the invoice. I could even accept payment via credit card.
It cost me something (I don't remember what it was, but it was under $50/month) and saved me so much time. (There are many competitors to FreshBooks and I'm sure each of them would have done the same.)
That's the tradeoff. Most things can be done for "free" if you count your time as having zero value. That is very rarely the case. It may be a good idea to minimize $$ out the door as much as possible when you are starting, but in a while (even if it takes you years, like it did for me) you'll learn to trade money for time using specialized tools.
Is that because most SaaS offers "sign in with google"? Or is there something else involved?
1. New employee hired 2. They get a gsuite account. This gives them access to google drive, gmail, gcal, etc. (This is the provisioning I think you are referring to.) 3. They can now login to asana, zapier, <other saas tool> with their gsuite account, using "login with google" 4. Their permissions within these saas tools are managed by the admins in those tools (not from gsuite). 5. When an employee departs, you disable their gsuite account. Then they can't log in to any of the SaaS tools, since their google account is disabled.
If you want a user to have centralized RBAC or ABAC, you need to use a real IdP, not gsuite in the way I outline above.
If you are using SAML for gsuite, you can use SCIM, I believe, to provision, but that's a different flow than I have outlined above. https://support.google.com/a/topic/6400789 has more on that.