Every large organization that I have worked at has a solution for desktop and server Linux. The downside is you typically have a password hash stored in ad or a separate service. Ultimately, it isn’t terrible, but you do have a lot of enforcement at the border. So trouble can surprisingly appear when you connect remotely.