9,632 questions
How to remove MFA/2FA requirement for one user? I can send you screenshots if necessary. we have disabled the 2FA on the user account but it is not working
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 53%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
lucamommy2024
0
Reputation points
I can send you screenshots if necessary. we have disabled the 2FA on the user account but it is not working.
I wish u have a good day!
take care and stay safe!
regards,
nicole
Microsoft 365 and Office | Install, redeem, activate | For business | Windows
{count} votes
-
Diego Martos 85 Reputation points Microsoft Employee2024-09-25T14:51:54.0133333+00:00 Hello, here are some things I have faced and documentations I've used, as there may be not just one knob to switch to achieve your issue, but perhaps an environment condition or requirement that we are not accounting for.
If you have developer support services in azure, (not just free/basic for billing only issues), then you could open a technical support and work with an Engineer to further troubleshoot.
In case the info below is not useful, to learn more about the different tiers of Microsoft Support, inclusions and exclusions, you can check the following link: https://azure.microsoft.com/en-us/support/plans/?msockid=3fb149c2cfb065fd13ef5ddcceb8645f
To remove the MFA/2FA requirement for a single user in Microsoft Azure Entra ID, you need to ensure that there are no conflicting policies or settings that might be enforcing MFA from an Identity Governance hierarchy. Here are the steps and considerations:
- Disable Per-User MFA:
- Go to the Microsoft 365 admin center.
- Navigate to Users > Active users.
- Select the user in question.
- Click on Manage multifactor authentication.
- Select the user again and choose Disable multi-factor authentication.
- Check Conditional Access Policies:
- Sign in to the Azure portal.
- Go to Azure Active Directory > Security > Conditional Access.
- Review any Conditional Access policies that might be enforcing MFA for the user. Ensure that there are no policies requiring MFA for the specific user or their group.
- Security Defaults:
- If Security Defaults are enabled, they enforce MFA for all users. To disable Security Defaults:
- Go to Azure Active Directory > Properties.
- Click on Manage security defaults.
- Toggle Enable security defaults to No.
- Legacy Authentication:
- Ensure that legacy authentication protocols are not enforcing MFA. Sometimes, older protocols might still require MFA even if it’s disabled for the user.
- User-Specific Settings:
- Verify that there are no user-specific settings or app-specific settings that might be enforcing MFA.
Good references and discussions:
Reference #1: https://learn.microsoft.com/en-us/answers/questions/101179/how-to-disable-the-two-factor-authentication-from
Reference #2: https://learn.microsoft.com/en-us/entra/identity/monitoring-health/recommendation-turn-off-per-user-mfa
- Disable Per-User MFA:
Sign in to comment
Sign in to answer