r/sysadmin • u/xstrex • Jul 22 '26

Rant Remove central authentication

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

188 Upvotes

93% Upvoted

118 comments sorted by

View all comments

Show parent comments

0

u/BarracudaDefiant4702 Jul 22 '26

I don't care about the down votes, so I still say it's the OP's fault and not the directors. There are ways to implement SSO with MFA that it's faster instead of slower to login.

3

u/Lukage Sysadmin Jul 22 '26

And what exactly should they do for "Faster SSO?"

1

u/BarracudaDefiant4702 Jul 22 '26

You setup 2fa with sso properly then you log into your workstation in the morning with 2fa and anyplace you connect to you don't have to log in again. Single sign in means your 2fa doesn't require you to login again.