The capture was simple.
Employees out buying stuff captured the invoice / receipt.
We had multiple people out doing this. We didn't require MFA OR multiple login's because it was a simple capture utility.
Now you have announced this assist rubbish will have to be used for capture with MFA and no shared accounts.
Thanks a lot..