How to disable 2FA on azure account for global user?

Question

How to disable 2FA on azure account for global user?

thomas magami 21

I want to remove 2FA on my azure account. For that I have followed the following steps:-

As per the second screenshot, it appears to be disabled. But it asks me to verify the token at the time of signing in.
Any idea here what I'm doing wrong?

I will really appreciate your help on this.

JamesTran-MSFT 37,221 Reputation points Microsoft Employee Moderator

2022-12-09T19:49:41.157+00:00

@thomas magami
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

1 answer

Your answer

JamesTran-MSFT 37,221 Reputation points Microsoft Employee Moderator

2022-12-09T19:49:41.157+00:00

@thomas magami
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

Answer 1

Michael Durkan 12,251 MVP

Hi

check for Security Defaults. In Azure AD, Click Properties-Click Manage Security Defaults-Select No to Disable Security defaults.

Also, check for SSPR, this was scheduled to rollout and be enabled for all tenants from Oct 1st:

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr-combined

Hope this helps,

Thanks

Michael Durkan

If the reply was helpful please upvote and/or accept as answer as this helps others in the community with similar questions. Thanks!

thomas magami 21 Reputation points

2022-12-02T21:02:08.91+00:00

@Michael Durkan

Please see this screenshot.

SSPR is not set on my account. But it asks me for the option where to send the verification code when I try to sign in to my account for the verification code.
Michael Durkan 12,251 Reputation points MVP

2022-12-03T08:33:45.167+00:00

Hi

ok, so if Security Defaults is off, do you have nay Conditional Access policies in place that may be overwriting this? What level of AZure AD license do you have, are you on free tier or do you have P1/P2 added?

Check the Azure AD user sign in logs to see what the logs are saying, they will point you in the direction of what policy or control is forcing the MFA.

If you set up a new test user and disable MFA, does the same happen to that account?

Thanks

Michael
JamesTran-MSFT 37,221 Reputation points Microsoft Employee Moderator

2022-12-08T15:19:15.993+00:00

@thomas magami
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Share via

How to disable 2FA on azure account for global user?

1 answer

Your answer