MFA not presenting options aside from Authenticator apps

Question

Hello,

our organization uses MFA and lately during the new user setup the MFA options lack SMS/Phone-authentication.

This is in Finnish, but the issue lies in the fact that the only option for MFA is the authenticator app.

MFA is configured in the portal with the following options, so this should not be the problem:

In a separate test enviroment the MFA provides the option for SMS/phone authentication:

do you know what could be the issue and how to allow phone authentication?

BR,
Mauri

Answer 1

Check whether Security defaults are enabled, as those limit the available methods to just the Authenticator app. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

Apart from that, check which methods are enabled under SSPR settings (Azure AD > Password reset > Authentication methods) and the new controls under Azure AD > Security > Authentication methods.