Skip to main content
Information Security

Return to Question

deleted 85 characters in body
Source Link
schroeder ♦
schroeder ♦
  • 132.2k
  • 55
  • 307
  • 348

The question may be "too broad" or "unclean" but I'll try to ask for advice.

We are thinking about to enableenabling 2FA with Google Authenficator for all our services.

But the only concern for me now is that users will have to have a dedicated Authenticator's account for every service, let's say:

  • Github
  • AWS
  • Gmail
  • Jenkins

Maybe there is a better approach? Something

Something like using a self-hosted TOTP service...? Although this, I guess, will require to have an SSO to be enabled between all accountaccounts as well, but SSO is out of the scope of current tasks.

The question may be "too broad" or "unclean" but I'll try to ask for advice.

We are thinking about to enable 2FA with Google Authenficator for all our services.

But the only concern for me now is that users will have to have a dedicated Authenticator's account for every service, let's say:

  • Github
  • AWS
  • Gmail
  • Jenkins

Maybe there is a better approach? Something like using a self-hosted TOTP service... Although this I guess will require to have an SSO enabled between all account as well, but SSO is out of the scope of current tasks.

We are thinking about enabling 2FA with Google Authenficator for all our services.

But the only concern for me now is that users will have to have a dedicated Authenticator's account for every service, let's say:

  • Github
  • AWS
  • Gmail
  • Jenkins

Maybe there is a better approach?

Something like using a self-hosted TOTP service? Although this, I guess, will require SSO to be enabled between all accounts as well, but SSO is out of the scope of current tasks.

Source Link
setevoy
setevoy
  • 111
  • 3

MFA for multiple accounts?

The question may be "too broad" or "unclean" but I'll try to ask for advice.

We are thinking about to enable 2FA with Google Authenficator for all our services.

But the only concern for me now is that users will have to have a dedicated Authenticator's account for every service, let's say:

  • Github
  • AWS
  • Gmail
  • Jenkins

Maybe there is a better approach? Something like using a self-hosted TOTP service... Although this I guess will require to have an SSO enabled between all account as well, but SSO is out of the scope of current tasks.