Products and Standards often solve for the Pareto Principle where Single Sign-On with MFA via a dedicated piece of hardware for scanning RFID tags or performing an experiment on a linear accelerator beam line is an edge case.  In a laboratory environment, it’s the mission-critical 80%.  

During a deployment over the last 18 months of phishing resistant MFA, we have found many points of friction in the usual dichotomy of “Workforce” vs. “Consumer”, or “Enterprise” vs. Non-Enterprise”.  Drawing from a large scale rollout at a highly complex research environment, I will examine how “good enough for consumers” contrasted with “rigid enough for workforce” often creates the very gaps our mission critical use cases inhabit.