SSO Backdoor

Ben Bazian

We have implemented SAML based SSO to our server.  Before we remove local login what is the process if our SSO gets broken for some reason?  In general, we do not want to allow local authentication but is there something we can do at the server lever (SSH) in a config file to allow for local login in case of a recovery mode?  

Would need the same info for Jira in that we will be doing that too.

 

Shawn Doyle - ReleaseTEAM

Hi @Ben Bazian 

 

First, don't call it a backdoor, security types don't like that. 

I like to leave one admin account using the local built-in directory, just as a fail-safe, security people like a fail-safe.  I typically won't advocate that anyone use this account unless necessary and that its credentials are properly secured.