How can I remove 2FA factor from my company?

Question

Hello,

In our company we have various accounts that have the Microsoft Autenticator with a phone that doesnt work anymore. Therefore, I tried to remove the Microsoft Autenticator by disabiling them in the multifactor authenticator portal. Still, many users keep getting ask to verify themselves through the microsoft autenticator app in the old phone that does not work.

What can I do to allow the users to get in their emails without getting asked about the Microsoft Autenticator app?

Answer 1

Hi,

By default the security defaults are enabled on the tenant and this could be causing the MFA popups for the users check this - https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/set-up-multi-factor-authentication?view=o365-worldwide

Turn off legacy per-user MFA

Per-user MFA is a legacy service and you should give consideration to using the newer Security defaults or Conditional Access policies.

If you've previously turned on per-user MFA, you must turn it off before enabling Security defaults. You should also turn off per-user MFA after you've configure your policies and settings in Conditional Access.

1. In the Microsoft 365 admin center, in the left nav choose Users > Active users.
2. On the Active users page, choose Multi-factor authentication.
3. On the multi-factor authentication page, select each user and set their Multi-Factor auth status to Disabled.

Hope this helps.

JS

==

Please Accept the answer if the information helped you. This will help us and others in the community as well.