SC19 Proceedings

The International Conference for High Performance Computing, Networking, Storage, and Analysis

What Deploying MFA Taught Us about Changing Infrastructure


Workshop: What Deploying MFA Taught Us about Changing Infrastructure

Abstract: NERSC is not the first organization to implement multi-factor authentication (MFA) for its users. We had seen multiple talks by other supercomputing facilities who had deployed MFA, but as we planned and deployed our MFA implementation, we found that nobody had talked about the more interesting and difficult challenges, which were largely social rather than technical. Our MFA deployment was a success, but, more importantly, much of what we learned could apply to any infrastructure change. Additionally, we developed the sshproxy service, a key piece of infrastructure technology that lessens user and staff burden and has made our MFA implementation more amenable to scientific workflows. We found great value in using robust open-source components where we could and developing tailored solutions where necessary.






Back to HPC Systems Professionals Workshop (HPCSYSPROS19) Archive Listing


Back to Full Workshop Archive Listing