We have an all-Mac (and a few Linux) fleet. I've been tasked with making our system logins more secure. Rotate every 90 days, password reuse rules, password strength rules... basically the usual. I'm concerned that this combined with similar requirements on other systems are going to end up with a LOT of forgotten passwords. So I'm curious, what non-AD based authentication options are there?
I know OpenDirectory used to be popular, but a lot of my clients are roaming frequently. I've also found that JumpCloud has an installed Agent which is interesting. Is there anything else? What are others doing for central authentication of laptops in a highly mobile world?
Thanks!
