3 ms·

Single Sign on. There is nothing worse than loads of different accounts that are all for the same person.

• yjftsjthsd-h 8y ago
  Bonus points if the multitude of accounts don't map 1-1 to people. Sometimes an account is for a user, sometimes it's for a team, sometimes it was a user until they quit and it became a team account but still with the original employee's name. The accounts are all individually managed, of course, so getting access to something requires raising a ticket to the relevant team, then testing whether the account they gave you actually has permissions to do your job. But sometimes you find that they only gave you read-only access because only they can actually modify that cluster. Oh, and sometimes you find that an ex-employee only had maybe half of their accounts deactivated, and one of them has been recently used, and you have to find out whether you're looking at a security breach or just "recycled" account use. We use SSO now. It's nice.