renstur@coopnet:~/blog$ ls -lt ./topics/recovery/
recovery/
-
Break glass access when your SSO lives behind your VPN
My SSO, its recovery mail and my password manager share one VM, and NetBird and Proxmox both sign in through it. So my way in depends on neither: Proxmox local accounts, servers on setup keys, long VPN sessions on admin devices, and printed backup codes.