How to remove Office phone as a sign-in method for O365?

Question

When i go to mysignins.microsoft.com and select 'Add sign-in method' I see Office phone as an option to choose as a sign-in method. I would like to remove this option. I have excluded myself from the 'Voice call' and 'SMS' authentication methods in entra.microsoft.com. The legacy MFA and SSPR verification options have been disabled.

I thought excluding myself from the 'Voice call' and 'SMS' option in the authentication method policies would have removed the 'Office phone' sign-in method.

Any ideas on how to remove the 'Office phone' sign in method?

Answer 1

It seems like you've taken steps to exclude yourself from voice calls and SMS authentication methods in the authentication method policies. However, if you're still seeing the "Office phone" option and want to remove it, you may want to check a few additional settings:

1. Azure AD Security Defaults or Conditional Access Policies:
   • Confirm that there are no security defaults or conditional access policies that specifically enable the use of "Office phone" as a sign-in method. Check the policies in the Azure portal (Azure Active Directory > Security > Conditional Access) to ensure that no policies are forcing the use of "Office phone."
2. User-specific settings:
   • Verify your user settings. In Azure Active Directory, navigate to "Users" and find your user account. Look for any specific settings or configurations related to sign-in methods.
3. Contact Microsoft Support:
   • If the issue persists and you've checked the relevant policies without success, it might be a good idea to contact Microsoft Support. They can provide more specific assistance and investigate if there's an issue with your account or any underlying configurations.

Answer 2

The user account I was testing with was a User Administrator. Once I removed them from that role the 'office phone' option went away.