Examples
Examples
Try the starting example
- Eligible accounts: ID, accepted exception expiry inclusive or none
- A,none B,none C,2026-10-31
- Enrollment records: ID, account, method label, enabled yes/no; or none
- M1,A,webauthn,yes M2,B,password,yes M3,C,webauthn,no M4,D,TOTP,yes
- Methods counted by supplied policy, joined by |
- webauthn|TOTP
- Audit date
- 2026-10-20
- Nonexempt eligible accounts
- 2
- Counted-method coverage among nonexempt accounts (%)
- 50
- Nonexempt accounts without an enabled counted method
- B
- Accounts with current supplied exceptions
- C
- Nonexempt accounts with only enabled uncounted methods
- B
- Enrollment account IDs absent from eligibility inventory
- D
Try another scenario
- Eligible accounts: ID, accepted exception expiry inclusive or none
- A,none B,none C,2026-10-31
- Enrollment records: ID, account, method label, enabled yes/no; or none
- M1,A,webauthn,yes M2,B,password,yes M3,C,webauthn,no M4,D,TOTP,yes
- Methods counted by supplied policy, joined by |
- webauthn|TOTP|password
- Audit date
- 2026-10-20
- Nonexempt eligible accounts
- 2
- Counted-method coverage among nonexempt accounts (%)
- 100
- Nonexempt accounts without an enabled counted method
- None
- Accounts with current supplied exceptions
- C
- Nonexempt accounts with only enabled uncounted methods
- None
- Enrollment account IDs absent from eligibility inventory
- D
Calculation method
Calculation method
Nonexempt eligible accounts
Eligible accounts without an unexpired explicitly supplied exception.
Counted-method coverage among nonexempt accounts (%)
At least one enabled method named by the supplied policy/nonexempt accounts×100.
Nonexempt accounts without an enabled counted method
Missing qualifying enrollment remains uncovered.
Accounts with current supplied exceptions
Exception expiry≥audit, regardless of actual enrolled methods.
Nonexempt accounts with only enabled uncounted methods
Uncovered accounts with at least one enabled method outside the supplied counted set.
Enrollment account IDs absent from eligibility inventory
Deduplicate unknown enrollment accounts; exclude them from the eligible denominator.
Symbols and units
- a
- Eligible accounts: ID, accepted exception expiry inclusive or none
- b
- Enrollment records: ID, account, method label, enabled yes/no; or none
- c
- Methods counted by supplied policy, joined by |
- d
- Audit date
Use the units shown. A list keeps the order in which you enter its values. The symbol ^ means “raised to the power of”.
Assumptions & limits
Assumptions & limits
- An enrollment-inventory audit against explicitly supplied method labels and accepted exceptions. It does not validate authenticator strength, prove MFA enforcement or approve an exception; no account settings are changed.
Are these inputs private?
These calculations run in your browser. A shared link contains the values you choose to share. Only questions submitted to the separate AI finder are sent to OpenAI.
Further reading
Background reading; this does not imply endorsement or independent review of SumFizz.