7
What are You Working on Wednesday
(infosec.pub)
An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!
Enjoy!
If you add any specific measure I could comment on that, but generally I think that user experience must be taken into account up to a point. You won't disable 2FA so they don't have to get their phone, but you implement it with SSO so logging in once is sufficient.
Power users such as admins on the other hand should be able to understand and use higher security measures such as 2FA for every administrative login.