5 ms·
The standard setup I’ve seen is MFA on VPN, with critical systems available only via VPN (like SSH), then all other services (email, GitHub, Slack, etc) are ava
by ramphastidae 5y ago
The standard setup I’ve seen is MFA on VPN, with critical systems available only via VPN (like SSH), then all other services (email, GitHub, Slack, etc) are available only through SSO with its own MFA.
- Haemm0r 5y agoHow do you handle Cisco Webex with SSO+MF and video conferencing systems/rooms? For regular useres SSO+MF is no prob, however the rooms users are.
- er4hn 5y agoThe room users, as in, of a meeting room? I think those are defined to be in the "meatspace private network", so you don't need SSO/MF so long as the device identifies itself as being a member of the room. I haven't seen video conferencing hardware at co-working spaces, it seems everyone there just plugs in their laptop if need be.
- alistairSH 5y agoMFA for both VPN (code repos, servers) and MFA/SSO for web application access at my employer. My wife's employer is similar. I work in software; she's in finance. I amazed this isn't the norm across all industries.