Managing Microsoft Multifactor Authentication in Azure DevOps

Question

Hello, in our company there is the MFA policy for Microsoft 365 users. A user just lost his mobile phone in which he had the Microsoft Authenticator App. I've disable his MFA of the Microsoft 365 admin center. Now he is able to have access to the Office 365 account. The problem is that the Azure DevOps login is still requiring the MFA by Microsoft Authenticator App on his old phone. How can I disable MFA in Azure DevOps? Or how can I switch his authentication to OTP token by SMS message? Thanks, Roberto

Answer 1

The problem is that I don't see the "Authentication." I'm admin, should I be the organization owner to see it?

Answer 2

Hey Roberto Pangallo!

Dealing with MFA hiccups is always a bit of a puzzle, lemme help. Head over to the Azure DevOps portal, "Organization Settings," get into "Security," and hit "Policies" > "Authentication." There, you can change the user's authentication methods. If you want to switch to OTP via SMS, getr to the user's profile, navigate to "Credentials," and hit "Manage alternative authentication." Choose "Phone" and set up SMS as the method. After making these changes, ask your user to sign out and back in again. That should get them back in without the MFA.

it might take a little while for the changes to propagate. if noting works I sguuest you to raise a support req.

If this helps kindly accept the answer thanks much.

Answer 3

We are connected to the Microsoft Entra Company directory, is it managed directly from there?