Harbour ITMenu

Powered by Office Sentry 2.2.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Contoso Legal LLP

Contoso Legal LLP

contoso.onmicrosoft.com

MFA coverage

Who has set up MFA, who is required to use it, and where the two don't match.

All clients
Download PDFXLSX

How MFA is required 5

1 to review CSV

Setting up MFA and being required to use it are separate. Both are needed.

SettingValue
Security DefaultsOff
Conditional Access policies requiring MFARequire MFA for all users
Report-only MFA policies (not enforced) lowMFA for admins (report only)
Legacy sign-in blocked by highNothing
Per-user MFANot read: Conditional Access is the way to require MFA on this tenant

Accounts with a gap 2

Enabled members who either haven't set up MFA or aren't required to use it. Admins first.

AccountAdmin rolesGapMFA set upRequired by
joseph.morris@contoso.example mediumRequired, not set upNoRequire MFA for all users
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
lily.harrison@contoso.example mediumRequired, not set upNoRequire MFA for all users
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
AccountAdmin rolesMethodsRequired by
annabel.fraser@contoso.exampleGlobal Administrator, Groups Administrator (limited scope)Authenticator appRequire MFA for all users
ella.thomas@contoso.exampleWindows Hello, Authenticator appRequire MFA for all users
evie.davis@contoso.exampleAuthenticator app, Authenticator codeRequire MFA for all users
jack.white@contoso.exampleAuthenticator app, Authenticator codeRequire MFA for all users
jacob.johnson@contoso.examplePasskey, Authenticator appRequire MFA for all users
megan.smith@contoso.exampleAuthenticator app, Authenticator codeRequire MFA for all users
noah.clark@contoso.exampleWindows Hello, Authenticator appRequire MFA for all users
oliver.hill@contoso.exampleAuthenticator app, Authenticator codeRequire MFA for all users
olivia.ward@contoso.exampleAuthenticator app, Authenticator codeRequire MFA for all users
olivia.wilson@contoso.exampleAuthenticator app, Authenticator codeRequire MFA for all users
owen.taylor@contoso.exampleAuthenticator app, Authenticator codeRequire MFA for all users
priya.hughes@contoso.exampleWindows Hello, Authenticator appRequire MFA for all users
rhys.evans@contoso.examplePhoneRequire MFA for all users
sophie.taylor@contoso.examplePhoneRequire MFA for all users
william.allen@contoso.examplePhoneRequire MFA for all users
william.clark@contoso.exampleAuthenticator app, Authenticator codeRequire MFA for all users

Guests 1

Guests set up MFA in their own organisation, so only whether this tenant requires it is shown.

GuestRequired byExcluded from
g#EXT#@contoso.exampleRequire MFA for all users

Data from Users (), MFA registration (), Conditional Access (), Per-user MFA (), Admin roles ().