Created by Claude - please verify

Single-factor sign-ins - successful interactive sign-ins with authenticationRequirement = singleFactorAuthentication, 7 days (beta sign-in log).

Required Microsoft Graph permissions

AuditLog.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Entra ID P1 (sign-in logs).

Endpoint: GET /beta/auditLogs/signIns?$filter=authenticationRequirement eq 'singleFactorAuthentication' and status/errorCode eq 0

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Single-factor Interactive Sign-ins (7 days)

CA Coverage Gaps shows which users and apps no MFA policy covers. This report shows the sign-ins that actually got through with a password alone during the last week - per user, and the apps where most of them land, so the MFA policy can be widened where it matters.