Disabling MFA push to users emails within an aad organization.

Question

How would I disable MFA push to users on my AzureAD environment? I've tried disabling mfa requirements in Azure security settings and wandered through countless posts about "how to do this", although, I have never found a silver bullet for this problem.

Answer 1

Hello Hunter Dillman-Grcevich

Thank you for contacting the Microsoft community Q&A support.

Enabling or disabling MFA push depends on how this was configured. Currently, in the Entra ID environment, there are three different ways to achieve this depending on your setup.

• You can disable the MFA in the Entra ID blade by changing the security default settings to disabled. To do this, access Entra ID in your tenant, go to properties then click on the manage security default and set it to disabled. This will disable the push to all users.
• The other way is through conditional access which seems to be less applicable in your case as it seems you haven't set this up. This might push MFA to all users depending on the policy that has been created.
• The last option which seems to be not applicable in this case is the per MFA user setup that you can see on the Users' blade.

For more information, kindly visit the links below:

https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults

https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/set-up-multi-factor-authentication

Let me know if further assistance is needed.

Babafemi