Ivan

also lol how is this thread still going lmao

ahh classic plan recovery before rollout: at least two registered methods per user, a verified identity process at the helpdesk, and temporary access pasess instead of just disable MFA for a day.

yeahhh pair MFA with conditional access: require compliant or managed devices for sensitive apps, block legacy authentication, and alert on many denied pushes in a short time.

idk man that sounds like bad advcie tbh