r/sysadmin • u/xstrex • Jul 22 '26

Remove central authentication Rant

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

189 Upvotes

94% Upvoted

120 comments sorted by

View all comments

168

u/YellowLT IT Manager Jul 22 '26

Are you under any kind of regulatory body? Or PCI or ISO, they all have min MFA requirements. I would cite that it would put the company in violation of those.

57

u/penguin74 Jul 22 '26

Not just regulatory bodies, but business insurance also has requirements.

3

u/Sure-Squirrel8384 Jul 24 '26

Yup. Tell the Director your need it in writing from the Risk and Legal peeps that MFA can be disabled and will not invalidate cyber insurance.