All clients

Compare any report across every client you look after.

Report

Which methods people may register and use, from the tenant's authentication methods policy, against what's recommended for a small business.

Setting	Current	Recommended	Why
Authenticator shows where the sign-in is from low	Off	On (Microsoft managed turns it on)	Helps people spot a sign-in that isn't theirs.
Voice call	Off	Off	Calls can be redirected, and are easy to approve by mistake.
Temporary Access Pass	Off	On, for setting up passkeys	A time-limited pass for setting up a new phone or passkey.
System-preferred MFA (asks for the strongest method a person has) low	Off	On, or Microsoft managed	Otherwise people are asked for their own default, often a text message.
Authenticator shows where the sign-in is from low	Off	On (Microsoft managed turns it on)	Helps people spot a sign-in that isn't theirs.
Voice call	Off	Off	Calls can be redirected, and are easy to approve by mistake.
Temporary Access Pass	Off	On, for setting up passkeys	A time-limited pass for setting up a new phone or passkey.
System-preferred MFA (asks for the strongest method a person has) low	Off	On, or Microsoft managed	Otherwise people are asked for their own default, often a text message.
Authenticator shows where the sign-in is from low	Off	On (Microsoft managed turns it on)	Helps people spot a sign-in that isn't theirs.
Voice call	Off	Off	Calls can be redirected, and are easy to approve by mistake.
Temporary Access Pass	Off	On, for setting up passkeys	A time-limited pass for setting up a new phone or passkey.
System-preferred MFA (asks for the strongest method a person has) low	Off	On, or Microsoft managed	Otherwise people are asked for their own default, often a text message.

Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.

Passwords and sign-in methods