We use Umbrella, and recently migrated to sign into Umbrella via SSO. Previously, we could at a glance audit all users' 2FA status from the Umbrella dashboard, but now that users use their CCOID to sign in, the 2FA status of that account is divorced from the display in the Umbrella dashboard, as confirmed by support. Support also relayed that "there is no centralised setting where you can see the users that are having 2fa enabled or not." For auditing purposes, this is a pretty big miss, as the only way to truthfully attest that all users are protected with 2FA is to witness them sign in and be prompted, which is increasingly inefficient the more users there are. I was directed to post here for a feature request - this is something that is much needed.