Disable Authenticator registration requirement

Question

When we create a new user in the Entra admin portal, the user is prompted to configure Microsoft Authenticator in order to log in for the first time. However, the vast majority of these users will never access resources that require MFA. How can we prevent users from being required to setup Authenticator given that they won't ever have to use it?

Answer 1

Hi @danobri

I understand that you are trying to prevent users from being required to setup Authenticator.

There are three ways to enable multifactor authentication that is Security Defaults, Per User MFA, Conditional Access (CA) Policy.

Can I Know which way your MFA is enabled. We need to disable MFA now to prevent users from being required to setup Authentication:

• If MFA is enabled by Security defaults. Follow below steps to disable:

1. 1.Sign in to the Azure portal as a global administrator
2. 2.Go to Microsoft Entra ID > Properties.
3. 3.Under "Manage security defaults" settings at the bottom,
4. 4.At "security default" setting select from Enable to Disable options.

•  If MFA is enabled by Per-user MFA. Follow below steps to disable:

1. 1.Sign in to the Microsoft Entra admin center as at least an Authentication Administrator.
2. 2.Browse to Identity > Users > All users.
3. 3.Select Per-user MFA. click Disable MFA.

•  If MFA is enabled by Conditional Access Policy. Follow below steps to disable:

1. 1.Log in to entra.microsoft.com.
2. 2.Under Protection, select Conditional Access > Policies.
3. 3.Select the policy where MFA is enabled and disable it.
4. 4.Under State, click Edit and turn off the policy.

Hope this helps. Do let us know if you have any further queries.  

------------  

If this answers your query, do click `Accept Answer` and `Yes` for was this answer helpful. And, if you have any further query do let us know. 

Thanks,

B. Siri Chandana.