Hacker News Reader

The standard setup I’ve seen is MFA on VPN, with critical systems available only via VPN (like SSH), then all other services (email, GitHub, Slack, etc) are available only through SSO with its own MFA.

View on HN

MFA for both VPN (code repos, servers) and MFA/SSO for web application access at my employer. My wife's employer is similar. I work in software; she's in finance.

I amazed this isn't the norm across all industries.

How do you handle Cisco Webex with SSO+MF and video conferencing systems/rooms? For regular useres SSO+MF is no prob, however the rooms users are.

The room users, as in, of a meeting room? I think those are defined to be in the "meatspace private network", so you don't need SSO/MF so long as the device identifies itself as being a member of the room.

I haven't seen video conferencing hardware at co-working spaces, it seems everyone there just plugs in their laptop if need be.

Reply on news.ycombinator.com