NIST Digital Identity Guidelines

MFA covers 70% of workforce users; the binding behind it is what nobody counts

A passing MFA event proves someone controls an authenticator. SecurityWeek argues the processes that bind authenticators to people are where attackers work, and where assurance is never measured.