Platform security

P3 Platform Security Officer — 2FA posture, lockout, and Integration Module 70 review for the platform surface. 2FA cannot be disabled (TEP G5).

Second factor

Google or Microsoft Authenticator with email OTP fallback. Replace from Security — never disable.

Surface isolation

Platform-only principals cannot authenticate on Institution login.

Empty state, onboarding and help copy (DSH-P3)

Nothing here yet — Platform Security Officer dashboard

When this tenant has records for Platform Security Officer dashboard, they appear on this screen. This is the empty state for this role dashboard. Another tenant’s data never appears here.

Tip: Platform Security Officer dashboard is scoped to your current institution. Local Database remains the elected sign-in default. Entra is optional only via Integration Module 70.