How to disable the two factor authentication permanently for microsoft entra id user

Dharmendra Patidar 40 Reputation points

How can we disable two factor authentication permanently for single Microsoft Entra ID user at user level not directory level. for the new users we have only 15 days to set authentication via app. we want it should never ask for authentication at all.

the ropc token generation is failing due to below error if we set authentication in Authenticator app,

{"error":"invalid_grant","error_description":"AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '797f4846-ba00-4fd7-ba43-dac1f8f63013'. Trace ID: f0dbe11a-ec62-48d8-8212-9b80f3952e00 Correlation ID: 46527a0f-f4a5-4aeb-af2b-2b92a6ed9ff8 Timestamp: 2024-06-07 18:09:26Z","error_codes":[50076],"timestamp":"2024-06-07 18:09:26Z","trace_id":"f0dbe11a-ec62-48d8-8212-9b80f3952e00","correlation_id":"46527a0f-f4a5-4aeb-af2b-2b92a6ed9ff8","error_uri":"","suberror":"basic_action"}

any help would be appreciated.

Thanks in advance.

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
5,847 questions
0 comments No comments
{count} votes