We already have Duo for MFA, how do I stop the Authenticator app requirements launching Sept. 15?

Question

We already are using Duo as a third party MFA app for our users, but the Authenticator campaign is going to start Sept. 15 and we just received notice of it the day before! I can delay our users being required to use the MS Authenticator app for 14 days, but that's all. This will be a great burden to our users to have to use two different MFA apps just to sign in. How can I permanently disable this Authenticator campaign?

Answer 1

@Christine N. Albanese Thank you for reaching out to us, As I understand you want to exclude users from the registration campaign to set up Microsoft Authenticator App.

Please refer to this https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-registration-campaign#enable-the-registration-campaign-policy-using-the-microsoft-entra-admin-center:~:text=to%20three%20times.-,Enable%20the%20registration%20campaign%20policy%20using%20the%20Microsoft%20Entra%20admin%20center,-To%20enable%20a where you will find Excluded users and Group option - Allows you to exclude different users and groups that you want omitted from the feature. If a user is in a group that is excluded and a group that is included, the user will be excluded from the feature.

Also you can use this option to change the state from Microsoft managed to Disabled ( to disable the registration campaign).

Let me know if you have any further questions, feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.