All clients
Compare any report across every client you look after.
Emergency Global Administrator accounts for when normal sign-in breaks. Microsoft recommends two, cloud-only, excluded from Conditional Access, signing in with a FIDO2 key or passkey kept somewhere safe.
| Client | Account | Cloud‑only | On the .onmicrosoft.com domain | Excluded from | Sign‑in methods | Last sign‑in |
|---|---|---|---|---|---|---|
| Contoso Legal LLP high | breakglass@contoso.example | Yes | No | CA001 — Admins: Require phishing-resistant MFA, CA002 — All users: Require MFA, CA003 — Block legacy authentication and 8 more | None | 30 Sep 2026 |
Why we think it's break-glass: Named like one, Excluded from Conditional AccessWhat to check: No MFA method: Microsoft requires MFA for admin portals, so it may not get in; Use the .onmicrosoft.com domain so it works if a custom domain breaks | ||||||
| Fabrikam Dental Group high | breakglass@fabrikam.example | Yes | No | CA001 — Admins: Require phishing-resistant MFA, CA002 — All users: Require MFA, CA005 — Block sign-ins from disallowed countries and 6 more | None | 30 Sep 2026 |
Why we think it's break-glass: Named like one, Excluded from Conditional AccessWhat to check: No MFA method: Microsoft requires MFA for admin portals, so it may not get in; Use the .onmicrosoft.com domain so it works if a custom domain breaks | ||||||
| Northwind Traders high | breakglass@ | Yes | No | Require MFA for all users | None | 30 Sep 2026 |
Why we think it's break-glass: Named like one, Excluded from Conditional AccessWhat to check: No MFA method: Microsoft requires MFA for admin portals, so it may not get in; Use the .onmicrosoft.com domain so it works if a custom domain breaks | ||||||
Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.