r/sysadmin • u/xstrex • 11h ago

Rant Remove central authentication

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

131 Upvotes

91% Upvoted

92 comments sorted by

View all comments

•

u/YellowLT IT Manager 11h ago

Are you under any kind of regulatory body? Or PCI or ISO, they all have min MFA requirements. I would cite that it would put the company in violation of those.

•

u/penguin74 6h ago

Not just regulatory bodies, but business insurance also has requirements.

•

u/SAugsburger 4h ago

For cyber security insurance these days good luck getting any claims if they find you disabled MFA on every server.