How to disable SMS and Voice call authentication for all users

Question

Is there any way to disable SMS and Telephone call authentication for all users in the tenant? We want to force all users to use authenticator app number matching going forward. Thanks

Answer 1

Hi @Chris Clarke ,

To disable SMS and voice call as a method you can go to the regular per-user MFA settings under Microsoft Entra ID > Users > Per-User MFA > MFA service settings portal > service settings > methods available to users > disable "Call to phone" and "Text message to phone"

If your users are set up for SSPR you can go to users > password reset > authentication methods > and enable the ones you want:

You can also adjust the registration campaign so that users will be prompted to register with Authenticator. https://portal.azure.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/~/RegistrationCampaign

See related discussion: https://learn.microsoft.com/en-us/answers/questions/835182/azure-mfa-best-practices-removing-phone-and-text-a

If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions.