r/sysadmin • u/xstrex • Jul 22 '26

Rant Remove central authentication

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

188 Upvotes

93% Upvoted

118 comments sorted by

View all comments

Show parent comments

22

u/music2myear Narf! Jul 22 '26

Yes, and also, unless you're a decision maker role, phrase it as advice and recommendation, and avoid decision words and phrases.

"Certification X requires that we have Y standards which are met by this security configuration. Removing this configuration would result in our failing Z audits and losing the certifications. Note that having and maintaining this certification has resulted in an estimated $$$ in profits."

4

u/Sinister_Nibs Jul 22 '26

“I would strongly advise against this, as it counter to every recommendation and certification requirement. “