I am a newbie when it comes to Two factor authentication. I have the general idea of implementing two factor authentication on a single server. But I was wondering if there is a standard solution for implementing it on multiple servers.
So, there a bunch of *nix machines (around 50) for which I want to enable two factor authentication. If I enable 2 factor ssh authentication using google authenticator (https://www.digitalocean.com/community/tutorials/how-to-protect-ssh-with-two-factor-authentication) on all machines, it doesn't seem like a good idea to generate and keep track of individual auth codes. Is there any way I can simplify the whole process.
Is there a way I can use two factor ssh authentication once and forward it with my ssh requests to all machines? Like a proxy machine which can handle OAuth for rest of my stack? Also are there existing systems/softwares/services in place which, can make the implementation easier? I am open to new architectural designs as well.
Thanks in advance!
We are currently using ssh-key based authentication on all our machines