Kerberos (protocol)
Single point of failure: It requires continuous availability of a central server. When the Kerberos server is down, no one can log in. This can be solved by using multiple Kerberos servers and emergency authentication mechanisms.