Can anyone recommend an MFA solution with comprehensive reporting/auditing capabilities that can track and monitor user authentication events for compliance or incident investigations?
Sort by:
I think most of the IDP have this kind of capability out of the box.
What you wont get out of it is, if for example SMS/Voice messages have been hijacked through the Telecom SS7 Protocoll and others.
Since we don't know all the details you need, it may be hard to make a recommendation. If I may, I would suggest looking for a Multi-Factor Authentication (MFA) solution capable of logging everything to a Security Information and Event Management system (SIEM). Most of them are able to do this, and this is where reporting and investigation occur.
Splunk, Sentinel, Chronicle, QRadar, and many more, should be able to perform the job well.
happy to chat on the topic
Any good enterprise IDP can help like Jumpcloud