All clients
Compare any report across every client you look after.
Which methods people may register and use, from the tenant's authentication methods policy, against what's recommended for a small business.
| Client | Setting | Recommended | Why |
|---|---|---|---|
| Contoso Legal LLP | Passkeys and security keys (FIDO2) | On | Needed for phishing-resistant sign-in, which admins should use. |
| Contoso Legal LLP | Microsoft Authenticator | On | The second factor most people should use. |
| Contoso Legal LLP | Authenticator shows which app is signing in | On (Microsoft managed turns it on) | Helps people spot a sign-in that isn't theirs. |
| Contoso Legal LLP low | Authenticator shows where the sign-in is from | On (Microsoft managed turns it on) | Helps people spot a sign-in that isn't theirs. |
| Contoso Legal LLP low | Text message (SMS) | Off, once people use Authenticator | Texts can be intercepted or moved to another SIM. |
| Contoso Legal LLP | Voice call | Off | Calls can be redirected, and are easy to approve by mistake. |
| Contoso Legal LLP | Email one-time passcode | Off, unless guests or password reset need it | Not a second factor for members; only for password reset and guests. |
| Contoso Legal LLP | Temporary Access Pass | On, for setting up passkeys | A time-limited pass for setting up a new phone or passkey. |
| Contoso Legal LLP | Registration campaign (asks people to set up Authenticator at sign-in) | On, or Microsoft managed | Moves people off text messages and calls. |
| Contoso Legal LLP low | System-preferred MFA (asks for the strongest method a person has) | On, or Microsoft managed | Otherwise people are asked for their own default, often a text message. |
| Contoso Legal LLP | People can report an MFA prompt they didn't expect | On | A reported prompt blocks the account's risky sign-ins and alerts admins. |
| Contoso Legal LLP | Methods managed in this policy (not the old MFA and SSPR settings) | Yes | Microsoft has retired the old per-user MFA and SSPR method settings. |
| Fabrikam Dental Group | Passkeys and security keys (FIDO2) | On | Needed for phishing-resistant sign-in, which admins should use. |
| Fabrikam Dental Group | Microsoft Authenticator | On | The second factor most people should use. |
| Fabrikam Dental Group | Authenticator shows which app is signing in | On (Microsoft managed turns it on) | Helps people spot a sign-in that isn't theirs. |
| Fabrikam Dental Group low | Authenticator shows where the sign-in is from | On (Microsoft managed turns it on) | Helps people spot a sign-in that isn't theirs. |
| Fabrikam Dental Group low | Text message (SMS) | Off, once people use Authenticator | Texts can be intercepted or moved to another SIM. |
| Fabrikam Dental Group | Voice call | Off | Calls can be redirected, and are easy to approve by mistake. |
| Fabrikam Dental Group | Email one-time passcode | Off, unless guests or password reset need it | Not a second factor for members; only for password reset and guests. |
| Fabrikam Dental Group | Temporary Access Pass | On, for setting up passkeys | A time-limited pass for setting up a new phone or passkey. |
| Fabrikam Dental Group | Registration campaign (asks people to set up Authenticator at sign-in) | On, or Microsoft managed | Moves people off text messages and calls. |
| Fabrikam Dental Group low | System-preferred MFA (asks for the strongest method a person has) | On, or Microsoft managed | Otherwise people are asked for their own default, often a text message. |
| Fabrikam Dental Group | People can report an MFA prompt they didn't expect | On | A reported prompt blocks the account's risky sign-ins and alerts admins. |
| Fabrikam Dental Group | Methods managed in this policy (not the old MFA and SSPR settings) | Yes | Microsoft has retired the old per-user MFA and SSPR method settings. |
| Northwind Traders | Passkeys and security keys (FIDO2) | On | Needed for phishing-resistant sign-in, which admins should use. |
| Northwind Traders | Microsoft Authenticator | On | The second factor most people should use. |
| Northwind Traders | Authenticator shows which app is signing in | On (Microsoft managed turns it on) | Helps people spot a sign-in that isn't theirs. |
| Northwind Traders low | Authenticator shows where the sign-in is from | On (Microsoft managed turns it on) | Helps people spot a sign-in that isn't theirs. |
| Northwind Traders low | Text message (SMS) | Off, once people use Authenticator | Texts can be intercepted or moved to another SIM. |
| Northwind Traders | Voice call | Off | Calls can be redirected, and are easy to approve by mistake. |
| Northwind Traders | Email one-time passcode | Off, unless guests or password reset need it | Not a second factor for members; only for password reset and guests. |
| Northwind Traders | Temporary Access Pass | On, for setting up passkeys | A time-limited pass for setting up a new phone or passkey. |
| Northwind Traders | Registration campaign (asks people to set up Authenticator at sign-in) | On, or Microsoft managed | Moves people off text messages and calls. |
| Northwind Traders low | System-preferred MFA (asks for the strongest method a person has) | On, or Microsoft managed | Otherwise people are asked for their own default, often a text message. |
| Northwind Traders | People can report an MFA prompt they didn't expect | On | A reported prompt blocks the account's risky sign-ins and alerts admins. |
| Northwind Traders | Methods managed in this policy (not the old MFA and SSPR settings) | Yes | Microsoft has retired the old per-user MFA and SSPR method settings. |
Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.