ReportDetails2_1(Methods, OrgUnit) := Details if {
    Methods == "ONLY_SECURITY_KEY"
    Details := concat("", ["Allowable second factors is set to only security key for users in ", OrgUnit])
}

ReportDetails2_1(Methods, OrgUnit) := Details if {
    Methods == "ANY"
    Details := concat("", ["Allowable second factors is set to any for users in ", OrgUnit])
}

ReportDetails2_1(Methods, OrgUnit) := Details if {
    Methods == "NO_TELEPHONY"
    Details := concat("", ["Allowable second factors is set to any except verification codes via text/phone call for users in ", OrgUnit])
}

ReportDetails2_3(Status, OrgUnit) := Details if {
    Status == true
    Details := concat("", ["Post-SSO verification is enabled for users in ", OrgUnit])
}

ReportDetails2_3(Status, OrgUnit) := Details if {
    Status == false
    Details := concat("", ["Post-SSO verification is disabled for users in ", OrgUnit])
}

"ReportDetails": concat("", ["Minimum password length is set to ", LastEvent.NewValue, " for users in ", LastEvent.OrgUnit]),

AppsAllowingTakout[App] {
    Events := FilterEvents("UserTakeoutSettingsProto User Takeout ")  
    App := Apps[_]
    Filtered := [Event | Event := Events[_]; Event.AppName == App]
    LastEvent := GetLastEvent(Filtered)
    LastEvent.NewValue != "Disabled"
}

ReportDetails2_13(Status) = Details if {
    Status == false
    Details := concat("", ["For apps with individual admin control: The following apps allow takeout: ", concat(", ", AppsAllowingTakout)])
}