One Login, Many Districts: Consortium-Scale SSO and MFA That Actually Works

What happens when dozens of districts, each with different identity providers, staffing, legacy systems, and risk tolerance, need secure, unified access to shared applications? This workshop shares a regional IT center's multi-year journey building a centralized single sign-on and multi-factor authentication platform that brokers identity across Google Workspace, Microsoft Entra ID, and LDAP. This is a practitioner's account of what worked, what failed, and what they would do differently, complete with real architecture diagrams, rollout timelines, and numbers on account reduction and helpdesk impact. You will get a decision framework for choosing between identity brokering and direct federation, a phased MFA rollout sequence that starts with high-risk roles without overwhelming helpdesks, and specific tactics for negotiating OIDC and SAML support with SIS, LMS, and HR vendors. You will also learn which metrics demonstrate ROI to superintendents and boards. Whether you lead one district, a consortium, or a state system, you will leave with a realistic playbook for modernizing identity without adding burden for teachers and students. All workshops are BYOD and require All Access or Session + Registration to attend.