MOCKUP — E - Auth Methods · Phase 2 · identity · security · Follow REPORT-DESIGN-SPEC.md in Power BI Desktop to build this
Cq Claritiq · E - Auth Methods Refreshed today
Critical Caution Healthy · target
Scope: eni.enigron.com · c1.eni.enigron.com
Users with MFA
1,089
93.7% of enabled
No MFA
73
6.3% — top priority
FIDO2 registered
182
15.7% adoption
Passwordless-ready
412
Authenticator + Hello
SMS-only
248
21.3% — phase out
Authenticator
847
primary modern method
Auth method coverage matrix
MethodUsers registered% of enabledStrengthDistribution
FIDO2 security key18215.7%Phishing-resistant
182
Windows Hello for Business34830.0%Phishing-resistant
348
Authenticator (push)84773.0%Strong
847
TOTP (Authenticator/3rd-party)41235.5%Strong
412
SMS (text)24821.3%Weak — phase out
248
Voice call312.7%Weak — phase out
31
Email (OTP)80.7%Discouraged
8
No MFA registered736.3%Critical gap
73
Multiple methods per user is normal — totals exceed 100%. Phasing out SMS / Voice and pushing FIDO2 / Hello adoption is the standard 2025-2026 modernization path.
Quick views
Users with no MFA registered Showing 6 of 73 · Sorted by Last sign-in desc
Display NameUPNDepartmentLast sign-inAccount typeRecommendation
Lucas Brownlucas.brown@contoso.comEngineering2026-04-29MemberEnroll Authenticator immediately
svc-legacy-appsvc-legacy-app@contoso.com(blank)2026-04-28ServiceMigrate to managed identity
Partner X Userpartner.x@contoso.comExternalGuestConditional Access for guests
ex-contractor-jex-contractor-j@contoso.comOperations2025-08-14Member (stale)Disable account
Test User 042test042@contoso.com(blank)MemberTest account · remove
Marcus Holtmarcus.holt@contoso.comSales2026-04-26Member (new)Onboarding incomplete — enroll