How to disable MFA and secondary authentication verification?

Stevi Prettyman 11 Reputation points
2021-08-10T23:23:17.877+00:00

I am a Global Administrator in my Azure Org/Directory and I would like to disable MFA and secondary authentication protocols in my org so that users only need to enter their password to log in. I've attempted to accomplish this in a few different ways. Disabling Security Defaults: Properties>Manager Security defaults> Enable Security Defaults set to NO. Also, in the Per-user MFA list all users are showing as having MFA disabled. Nothing I've done seems to work. I'm still prompted to verify a security code that is messaged to my phone. Is there a way to disable all other secondary authentication methods?

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
5,451 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,389 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Sandeep G-MSFT 14,241 Reputation points Microsoft Employee
    2023-11-07T09:58:54.8366667+00:00

    @Stevi Prettyman

    Thank you for posting in Microsoft Q&A.

    As I understand you have disabled the security defaults on tenant and also have made sure that per user MFA is disabled for all users in Azure portal. Still users are getting prompted for MFA.

    You can check the sign-in logs in Azure AD for that particular user who is getting prompted for MFA and check which feature is triggering for MFA.

    It might be triggered due to Identity protection as well.

    Let me know if you have any further questions on this.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments