Harbour ITMenu

Powered by Office Sentry 2.3.1

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry

All clients

Compare any report across every client you look after.
What changed this month

Passwords and sign-in methods

Every row from every client, with the client first. Filter, sort and hide columns as on a client's own report; downloads keep the view.

Download PDFXLSXCSV

Sign-in methods policy 12 of 36

Which methods people may register and use, from the tenant's authentication methods policy, against what's recommended for a small business.

Client: Contoso Legal LLPRemove Clear filters
ClientSettingCurrentRecommendedWhy
Contoso Legal LLPPasskeys and security keys (FIDO2)On for Break glassOnNeeded for phishing-resistant sign-in, which admins should use.
Contoso Legal LLPMicrosoft AuthenticatorOn for All usersOnThe second factor most people should use.
Contoso Legal LLPAuthenticator shows which app is signing inMicrosoft managedOn (Microsoft managed turns it on)Helps people spot a sign-in that isn't theirs.
Contoso Legal LLP lowAuthenticator shows where the sign-in is fromOffOn (Microsoft managed turns it on)Helps people spot a sign-in that isn't theirs.
Contoso Legal LLP lowText message (SMS)On for All users except Break glassOff, once people use AuthenticatorTexts can be intercepted or moved to another SIM.
Contoso Legal LLPVoice callOffOffCalls can be redirected, and are easy to approve by mistake.
Contoso Legal LLPEmail one-time passcodeOn for All usersOff, unless guests or password reset need itNot a second factor for members; only for password reset and guests.
Contoso Legal LLPTemporary Access PassOffOn, for setting up passkeysA time-limited pass for setting up a new phone or passkey.
Contoso Legal LLPRegistration campaign (asks people to set up Authenticator at sign-in)Microsoft managed, for All users, can be skipped for 1 dayOn, or Microsoft managedMoves people off text messages and calls.
Contoso Legal LLP lowSystem-preferred MFA (asks for the strongest method a person has)OffOn, or Microsoft managedOtherwise people are asked for their own default, often a text message.
Contoso Legal LLPPeople can report an MFA prompt they didn't expectMicrosoft managedOnA reported prompt blocks the account's risky sign-ins and alerts admins.
Contoso Legal LLPMethods managed in this policy (not the old MFA and SSPR settings)YesYesMicrosoft has retired the old per-user MFA and SSPR method settings.

Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.