Harbour ITMenu

Powered by Office Sentry 2.3.1

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry

All clients

Compare any report across every client you look after.
What changed this month

Passwords and sign-in methods

Every row from every client, with the client first. Filter, sort and hide columns as on a client's own report; downloads keep the view.

Download PDFXLSXCSV

Sign-in methods policy 36

Which methods people may register and use, from the tenant's authentication methods policy, against what's recommended for a small business.

ClientSettingCurrentRecommended
Contoso Legal LLPPasskeys and security keys (FIDO2)On for Break glassOn
Contoso Legal LLPMicrosoft AuthenticatorOn for All usersOn
Contoso Legal LLPAuthenticator shows which app is signing inMicrosoft managedOn (Microsoft managed turns it on)
Contoso Legal LLP lowAuthenticator shows where the sign-in is fromOffOn (Microsoft managed turns it on)
Contoso Legal LLP lowText message (SMS)On for All users except Break glassOff, once people use Authenticator
Contoso Legal LLPVoice callOffOff
Contoso Legal LLPEmail one-time passcodeOn for All usersOff, unless guests or password reset need it
Contoso Legal LLPTemporary Access PassOffOn, for setting up passkeys
Contoso Legal LLPRegistration campaign (asks people to set up Authenticator at sign-in)Microsoft managed, for All users, can be skipped for 1 dayOn, or Microsoft managed
Contoso Legal LLP lowSystem-preferred MFA (asks for the strongest method a person has)OffOn, or Microsoft managed
Contoso Legal LLPPeople can report an MFA prompt they didn't expectMicrosoft managedOn
Contoso Legal LLPMethods managed in this policy (not the old MFA and SSPR settings)YesYes
Fabrikam Dental GroupPasskeys and security keys (FIDO2)On for Break glassOn
Fabrikam Dental GroupMicrosoft AuthenticatorOn for All usersOn
Fabrikam Dental GroupAuthenticator shows which app is signing inMicrosoft managedOn (Microsoft managed turns it on)
Fabrikam Dental Group lowAuthenticator shows where the sign-in is fromOffOn (Microsoft managed turns it on)
Fabrikam Dental Group lowText message (SMS)On for All users except Break glassOff, once people use Authenticator
Fabrikam Dental GroupVoice callOffOff
Fabrikam Dental GroupEmail one-time passcodeOn for All usersOff, unless guests or password reset need it
Fabrikam Dental GroupTemporary Access PassOffOn, for setting up passkeys
Fabrikam Dental GroupRegistration campaign (asks people to set up Authenticator at sign-in)Microsoft managed, for All users, can be skipped for 1 dayOn, or Microsoft managed
Fabrikam Dental Group lowSystem-preferred MFA (asks for the strongest method a person has)OffOn, or Microsoft managed
Fabrikam Dental GroupPeople can report an MFA prompt they didn't expectMicrosoft managedOn
Fabrikam Dental GroupMethods managed in this policy (not the old MFA and SSPR settings)YesYes
Northwind TradersPasskeys and security keys (FIDO2)On for Break glassOn
Northwind TradersMicrosoft AuthenticatorOn for All usersOn
Northwind TradersAuthenticator shows which app is signing inMicrosoft managedOn (Microsoft managed turns it on)
Northwind Traders lowAuthenticator shows where the sign-in is fromOffOn (Microsoft managed turns it on)
Northwind Traders lowText message (SMS)On for All users except Break glassOff, once people use Authenticator
Northwind TradersVoice callOffOff
Northwind TradersEmail one-time passcodeOn for All usersOff, unless guests or password reset need it
Northwind TradersTemporary Access PassOffOn, for setting up passkeys
Northwind TradersRegistration campaign (asks people to set up Authenticator at sign-in)Microsoft managed, for All users, can be skipped for 1 dayOn, or Microsoft managed
Northwind Traders lowSystem-preferred MFA (asks for the strongest method a person has)OffOn, or Microsoft managed
Northwind TradersPeople can report an MFA prompt they didn't expectMicrosoft managedOn
Northwind TradersMethods managed in this policy (not the old MFA and SSPR settings)YesYes

Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.