Why make a core security feature, SSO, so expensive?

[kijaco]

If GitHub claims to “take your security seriously”, then SSO should be available as a feature that is either:

1. part of the core product, or

2. an optional paid extra for a reasonable delta, or

3. attached to a price tier, but with a reasonably small gap between the non-SSO tier and SSO tiers.

It is a best practice and good security posture to enable SSO at your organization if you have over five employees. Why are companies, including GitHub (Microsoft), making it a part of "enterprise" plan and charging an arm and a leg for it ($4 per u/m vs. $21 per u/m, a 425% increase). SSO is not only a large company solution.

I outlined some possible solutions for GitHub above and urge them to consider making a change if they really want to show they value our security.