Policy Modes
Each tenant has an Authentication policy mode that sets how strictly policies are applied. Open the account menu (top right), choose Settings → Tenant Configuration, and set Authentication policy:
| Mode | Behaviour |
|---|---|
| Audit | Sign-ins are recorded and policies are created from them automatically, so AuthNull learns your environment. Nothing is blocked |
| Policy | Enforcement is simulated: you see which sign-ins would be blocked, without blocking them |
| Live mode | Zero trust: a sign-in is blocked unless a policy allows it. Make sure your policies are in place first |
Recommended Rollout
- Start in Audit while users sign in as usual.
- Review the policies AuthNull has created, and adjust their actions - for example require MFA for administrators.
- Switch to Policy and check which sign-ins would be blocked.
- When nothing unexpected would be blocked, switch to Live mode.
You can move back to Audit at any time, for example while onboarding a new system.