Rebuilding Remote Access · September 17, 2026 · 20 min
One Entra sign-in to a full Linux desktop: SSH certificates, Kerberos, and PKINIT
Getting from 'everyone types a Linux password' to 'one Entra ID sign-in in a browser, then a graphical desktop with no password anywhere.' The terminal half took an hour. The graphical half took the rest of the day and taught me considerably more.