It's true that it's a single point of failure. Sadly it's a trade-off for being able to easily manage access to hundreds of devices. We're keen on finding ways

It's true that it's a single point of failure. Sadly it's a trade-off for being able to easily manage access to hundreds of devices. We're keen on finding ways of handling failure but it largely depends on the device itself and what (if anything) it supports as a secondary authentication source.