How to change Combined Registration that will be deployed on September 30th to be implemented later by the organization?

Dantiele Queiroz 21 Reputation points
2022-09-27T18:40:48.32+00:00

Hi, good morning.

Please, how to change Combined Registration that will be deployed on September 30th to be implemented later by the organization?

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
836 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,628 questions
0 comments No comments
{count} votes

Accepted answer
  1. JimmySalian-2011 42,071 Reputation points
    2022-09-27T19:07:56.223+00:00

    Hi @Dantiele Queiroz ,

    Oh got it no issues, basically it is a general release and update from Microsoft so I am not sure if you can exclude your tenant. However I will suggest you to raise a support ticket via the portal and explain your situation.
    create-ticket

    245264-image.png

    Hope this helps.

    ==
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

4 additional answers

Sort by: Most helpful
  1. JimmySalian-2011 42,071 Reputation points
    2022-09-27T18:50:50.67+00:00

    Hi,

    That option or feature can only be disabled or set to enabled/disabled by the Global Admin at the organization level, not sure what you mean change the Combined Registration if it is enabled it is for all the users.

    The benefit of CR is with combined registration, users can register once and get the benefits of both Azure AD Multi-Factor Authentication and SSPR.

    After you enable combined registration, users who register or confirm their phone number or mobile app through the new experience can use them for Azure AD Multi-Factor Authentication and SSPR, if those methods are enabled in the Azure AD Multi-Factor Authentication and SSPR policies.

    If you then disable this experience, users who go to the previous SSPR registration page at https://aka.ms/ssprsetup are required to perform multi-factor authentication before they can access the page.

    Hope this helps.

    ==
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


  2. Dillon Silzer 56,681 Reputation points
    2022-09-27T19:08:09.567+00:00

    Hi @Dantiele Queiroz

    I do not believe there is an opt-out options of this. The feature will be turned on (on September 30th, 2022) and you cannot disable this.

    I advise you use the following flow chart to see how your users will be impacted (whether they will receive the interactive login screen prompting for more information or not):

    245170-image.png

    Cited from https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr-combined

    -----------------------------

    If this is helpful please accept answer.

    0 comments No comments

  3. Dantiele Queiroz 21 Reputation points
    2022-09-27T19:36:05.833+00:00

    Thank you very much for your time.
    I noticed that some features of Azure have the options "enabled, disabled or managed by Microsoft" as an attachment. So I would like to see if I can defer this imposition of the combined registration.245266-2022-09-27-15h30-32.png


  4. Marco Nachtrab 1 Reputation point
    2022-10-04T09:39:13.45+00:00

    Hello,

    we were informed by users about messages regarding the enforced combined registration enabled on MS side for all tenants.
    How can we disable the option until we had time to inform and prepare our (hundreds of users) user-base properly?

    0 comments No comments