3 more workdays to go and only 2 braincells left.

[fedops@fosstodon.org]

@tsvenson @Gina I've not yet seen an SSO solution that needs MFA for every single system. Usually you get a token once which is good for several days or weeks.

And, as we've all learned by now (hopefully), token is just fancy speak for "clear text password".

[giantspacesquid@fosstodon.org]

@Gina so you’re saying you’re 1-fault tolerant on brain cells 🦧

[waynedixon@mastodon.social]

@Gina wait, how did you have two brain cells left with 3 days to go?

[gina@fosstodon.org]

@waynedixon it's been a long year.

[tsvenson@fosstodon.org]

@fedops

Today I used my work Mac, as I do most times when I have to be at the office. It is prepped with Microsoft Intune, and we use Microsoft's SSO, and I was on the intranet.

After logging in to desktop I had to log in through the SSO with both password and MFA on the mobile three, yes 3, times within a minute.

First to Teams, then to Edge and lastly to Outlook web version in Edge.

And no, it wasn't a cold boot.

Effing crazy eh!

@Gina

[gina@fosstodon.org]

@tsvenson @fedops uuuugh Ms Authenticator 🤮

[tsvenson@fosstodon.org]

@Gina @fedops

Yeah, and those in charge of managing it at work doesn't see any issues with the scenario I just described. And that was just the first minute for me.

[fedops@fosstodon.org]

@tsvenson hehe yeah I get that sometimes also. But that will now have been the last time for at least 2 weeks I think?
@Gina

[tsvenson@fosstodon.org]

@fedops

Oh no no no. Some of the SSO sites time out in an hour or two. Most commonly those we host ourselves on hour own servers.

I work in the team who manage the M365 apps for our 60,000 staff. The SSO/MFA is _owned_ by another team, yet another team _owns_ VPN and so on. We are the regional government for 49 municipalities with 1.8 million people.

@Gina

[gina@fosstodon.org]

@tsvenson @fedops wow, that's intense.

[junior@fosstodon.org]

@Gina oh no that’s not a good sign lol 😂