This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 51%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDV%3C/text%3E%3C/svg%3E)
Anyone know how to remove the Office phone option as a sign-n method?
When I go to mysignins.microsoft.com and select 'Add-sign-in method' I see 'Office phone'. I have excluded myself from the 'Voice call' and 'SMS' authetication methods policies in entra.microsoft.com. Also the legacy MFA and SSPR verification options have been disabled since moving to the new authetication methods policies in entra.
Office phone is not a sign-in method. It can only be used for multi-factor auth, and for password recovery (SSPR). Did you check which methods are configured for the SSPR feature? https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sspr-howitworks#authentication-methods
It is a sign-in method. When I click 'Add sign-n method" its an option that is available. My SSPR settings are not configured since I am using the new authentication methods policies. In the new authentication methods policies I am excluding myself from voice and sms so I wouldn't think that a phone sign-in method would be available to me. I can't figure out how to remove it. In the future we don't want users to be able to use sms or phone for sign-in/mfa methods. The only method that I have available to me in the authentication methods policy is Microsoft Authenticator.
ldn't think a phone option would be available to me as a sign-in method.
It's not a sign-in method in the sense it cannot be used to login (as first/only auth method), and only can be used as a form of MFA, or to perform SSRP.
Are you testing with an admin user? Those have different requirements for SSPR, not subject to the settings you are showing above. Test with a regular user.
ahhhh......
I bet that is what it is. Let me test and confirm.
That's what it was. The user account I was testing with was a User Administrator. Once I removed them from that role the 'office phone' option went away.
Thank you very much. You saved my sanity today.
Here's something else you can try:
You can disable the use of SSPR for administrator accounts using the Update-MgPolicyAuthorizationPolicy PowerShell cmdlet. The
-AllowedToUseSspr:$true|$falseparameter enables/disables SSPR for administrators. Policy changes to enable or disable SSPR for administrator accounts can take up to 60 minutes to take effect.
Unfortunately, it's an all or nothing setting for all admin users.
