Too many different passwords?
Single sign-on, or integrated authentication, is easily overlooked by people doing IT. Here are some common and unnecessary scenes:
- the Intranet has a different logon from the desktop. Why??
- The xyz web service has a different logon. Again, why??
- The mail system and finance system have different logons.
On top of that they run different password policies: some require at least 6 characters, some at least 8, some even exactly 8!
The result is that people forget, they write it down, they share or they just don't bother to use the service at all. Technically there is no excuse for it. It is easy enough to integrate the logons.