Presentation
What Deploying MFA Taught Us about Changing Infrastructure
Event Type
Workshop
W
Datacenter
SIGHPC Workshop
State of the Practice
System Administration
System Maintenance
System Reliability
TimeFriday, 22 November 201911:14am - 11:29am
Location405-406-407
DescriptionNERSC is not the first organization to implement multi-factor authentication (MFA) for its users. We had seen multiple talks by other supercomputing facilities who had deployed MFA, but as we planned and deployed our MFA implementation, we found that nobody had talked about the more interesting and difficult challenges, which were largely social rather than technical. Our MFA deployment was a success, but, more importantly, much of what we learned could apply to any infrastructure change. Additionally, we developed the sshproxy service, a key piece of infrastructure technology that lessens user and staff burden and has made our MFA implementation more amenable to scientific workflows. We found great value in using robust open-source components where we could and developing tailored solutions where necessary.
Archive
Author/Presenters
