We are thinking about enabling 2FA with Google Authenficator for all our services.
But the only concern for me now is that users will have to have a dedicated Authenticator's account for every service, let's say:
Maybe there is a better approach?
Something like using a self-hosted TOTP service? Although this, I guess, will require SSO to be enabled between all accounts as well, but SSO is out of the scope of current tasks.