Why i can't add authentication method on user on Azure AD ? Greyed out

Tayeb Lograda 6 Reputation points
2021-10-15T00:33:16.913+00:00

Hello everybody, I'm Global admin, and i want to add some authentication methods for users, but when i'm on AAD, everything is greyed out, Need some helps ![140721-azure-ad.png][1] Thanks, [1]: /api/attachments/140721-azure-ad.png?platform=QnA

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,464 questions

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Tayeb Lograda 6 Reputation points
    2021-10-19T08:20:12.567+00:00

    Yes, i tried it and i can add from https://mysignins.microsoft.com/security-info

    But still nothing on AAD portal, still greyed out

    1 person found this answer helpful.
  2. Tayeb Lograda 6 Reputation points
    2021-10-15T19:12:17.797+00:00

    Ok, thank you

    I am waiting for your reply, this only happens on my account
    For all other users I can add authentication methods

  3. Radoslaw Piernicki 1 Reputation point
    2021-10-21T11:53:43.727+00:00

    Hello there I have the exact same issue als global administrator that I can not change my own account settings only for others, this does not make sense, would be nice if Microsoft can come into this and tell why this is not working properly.

    I can also change from https://mysignins.microsoft.com/security-info but this does not enable the MFA for Azure Login .

    0 comments
  4. Marilee Turscak-MSFT 33,801 Reputation points Microsoft Employee
    2021-10-25T21:47:33.627+00:00

    The response from the PG is that this is due to the converged MFA/SSPR, which is enabled by default now for every tenant. https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr-combined

    The Global Admin can only add the auth method such as mobile number or alternate mobile number on behalf of the user, but the user has to select his or her preferred mode of responding to the MFA and set this option up using the security info page.

    Let me know if this helps answer this at all. I agree that it feels counterintuitive and inconsistent to be able to add it for everyone else and then have it greyed out for myself, and I have relayed that feedback to the product team.