Unable to change MFA authentication method for a Azure AD User

Question

Hi Admins,

I had one account which had MFA enabled through the Microsoft Authenticator. At one point, this account was removed from the authenticator and when am trying to re-register this account for MFA through the Azure portal - it switched the MFA to "Email based" passcode authentication.

I tried using the "Per User MFA" menu from the Azure AD Users page, but that did not help in reverting back the change.

How can I change the authentication mechanism of this user to either Microsoft Authenticator or "Temporary access pass". (This should be enabled for a single user but not for all users).

Please help.

Answer 1

Helo @SITE ADMIN

Thank you for reaching out. I see that you would like to change the default MFA method for a single user. You can request end user to follow the steps listed below:

To change your default security info method

1. Sign into the Microsoft 365 portal (office.com).
2. Select your avatar in the top right, then select View account.
3. On the Security info page, select Change next to the Default sign-in method information.

1. Choose Microsoft Authenticator - notification from the list of available methods. If you're not using the Microsoft Authenticator app, select the Authenticator app or hardware token option.

1. Select Confirm. The default method used for sign-in changes to the Microsoft Authenticator app.

More information can be found on following article: https://support.microsoft.com/en-us/account-billing/change-your-two-step-verification-method-and-settings-c801d5ad-e0fc-4711-94d5-33ad5d4630f7 and https://support.microsoft.com/en-us/account-billing/set-up-the-microsoft-authenticator-app-as-your-verification-method-33452159-6af9-438f-8f82-63ce94cf3d29

I hope this helps and hence would request you to please "Accept the answer" if the information helped you. This will help us and others in the community as well.