Disable Microsoft Authenticator Registration

Question

Hello,

we have some users in the company who do not want to use the Microsoft Authenticator app on their private smartphone. Instead, these users should only be able to log in to the M365 enviorment with a Windows Hello device or a Fido key. How can we deactivate the registration requirement for the Microsoft Authenticator app in our tenant for certain users? At the moment, employees are asked to set up the Authenticator app as soon as it is removed from the user.

Answer 1

most likely activated by the Policy "ASC Default"

you "can" exempt here, however be advised this might become a risk