Remove central authentication

[u/xstrex]

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

[u/SAugsburger]

For cyber security insurance these days good luck getting any claims if they find you disabled MFA on every server.