That's what 2FA is for! And even with SSO, your credentials don't have access to everything, because no one employee should have access to everything. People s

That's what 2FA is for! And even with SSO, your credentials don't have access to everything, because no one employee should have access to everything. People should only have access to the IM channels, git repos, etc that they are actually involved with. Admin accounts and especially critical systems should be set up to require separate/additional authentication.