Harbour ITMenu

Powered by Office Sentry 2.2.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry

All clients

Compare any report across every client you look after.
What changed this month

Passwords and sign-in methods

Every row from every client, with the client first. Filter, sort and hide columns as on a client's own report; downloads keep the view.

Download PDFXLSXCSV

Sign-in methods policy 27 of 36

Which methods people may register and use, from the tenant's authentication methods policy, against what's recommended for a small business.

ClientSettingCurrentWhy
Contoso Legal LLPPasskeys and security keys (FIDO2)On for Break glassNeeded for phishing-resistant sign-in, which admins should use.
Contoso Legal LLPMicrosoft AuthenticatorOn for All usersThe second factor most people should use.
Contoso Legal LLPAuthenticator shows which app is signing inMicrosoft managedHelps people spot a sign-in that isn't theirs.
Contoso Legal LLPVoice callOffCalls can be redirected, and are easy to approve by mistake.
Contoso Legal LLPEmail one-time passcodeOn for All usersNot a second factor for members; only for password reset and guests.
Contoso Legal LLPTemporary Access PassOffA time-limited pass for setting up a new phone or passkey.
Contoso Legal LLPRegistration campaign (asks people to set up Authenticator at sign-in)Microsoft managed, for All users, can be skipped for 1 dayMoves people off text messages and calls.
Contoso Legal LLPPeople can report an MFA prompt they didn't expectMicrosoft managedA reported prompt blocks the account's risky sign-ins and alerts admins.
Contoso Legal LLPMethods managed in this policy (not the old MFA and SSPR settings)YesMicrosoft has retired the old per-user MFA and SSPR method settings.
Fabrikam Dental GroupPasskeys and security keys (FIDO2)On for Break glassNeeded for phishing-resistant sign-in, which admins should use.
Fabrikam Dental GroupMicrosoft AuthenticatorOn for All usersThe second factor most people should use.
Fabrikam Dental GroupAuthenticator shows which app is signing inMicrosoft managedHelps people spot a sign-in that isn't theirs.
Fabrikam Dental GroupVoice callOffCalls can be redirected, and are easy to approve by mistake.
Fabrikam Dental GroupEmail one-time passcodeOn for All usersNot a second factor for members; only for password reset and guests.
Fabrikam Dental GroupTemporary Access PassOffA time-limited pass for setting up a new phone or passkey.
Fabrikam Dental GroupRegistration campaign (asks people to set up Authenticator at sign-in)Microsoft managed, for All users, can be skipped for 1 dayMoves people off text messages and calls.
Fabrikam Dental GroupPeople can report an MFA prompt they didn't expectMicrosoft managedA reported prompt blocks the account's risky sign-ins and alerts admins.
Fabrikam Dental GroupMethods managed in this policy (not the old MFA and SSPR settings)YesMicrosoft has retired the old per-user MFA and SSPR method settings.
Northwind TradersPasskeys and security keys (FIDO2)On for Break glassNeeded for phishing-resistant sign-in, which admins should use.
Northwind TradersMicrosoft AuthenticatorOn for All usersThe second factor most people should use.
Northwind TradersAuthenticator shows which app is signing inMicrosoft managedHelps people spot a sign-in that isn't theirs.
Northwind TradersVoice callOffCalls can be redirected, and are easy to approve by mistake.
Northwind TradersEmail one-time passcodeOn for All usersNot a second factor for members; only for password reset and guests.
Northwind TradersTemporary Access PassOffA time-limited pass for setting up a new phone or passkey.
Northwind TradersRegistration campaign (asks people to set up Authenticator at sign-in)Microsoft managed, for All users, can be skipped for 1 dayMoves people off text messages and calls.
Northwind TradersPeople can report an MFA prompt they didn't expectMicrosoft managedA reported prompt blocks the account's risky sign-ins and alerts admins.
Northwind TradersMethods managed in this policy (not the old MFA and SSPR settings)YesMicrosoft has retired the old per-user MFA and SSPR method settings.

Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.