5 ms·
Really stupid question. A key employee leaves, with their personal 2FA. Is there a standardized corporate solution for this yet? Sorry if that’s weirdly worded
by texasbigdata 6y ago
Really stupid question. A key employee leaves, with their personal 2FA. Is there a standardized corporate solution for this yet? Sorry if that’s weirdly worded
- deleted 6y ago[deleted]
- tmpz22 6y agoYa you disable and invalidate all credentials for the user. There's a reason IT usually has prior knowledge of any hiring/firing/leaving.
- yjftsjthsd-h 6y agoDisabling their account or altering their first factor makes the second factor irrelevant. Who cares if I have a TOTP code for my old account, if the account is deactivated and/or its password changed?
- kerng 6y agoThe best part are breakglass keys or certs! Who rotates them when someone who had access to one leaves the org? :)
- hnzix 6y agoThere are various vendor products that support automated deprovisioning when an employee is terminated in the master HR system. You're 1000x more likely to see them in a corporate setting than a startup.
- donkeyd 6y agoMy previous startup had a bit of both. My access to things like mail and Atlassian stuff was automatically revoked, while I could still access the production database months later.