Report which users are in scope for SSPR (either all buyers, a person unique group, or no consumers) as well as the authentication methods they will use. When stability concerns aren't nevertheless available to deal with from the Authentication methods policy, ensure you document them for later