How to disable MFA for testing

Question

How to disable MFA for testing

Schifter, Gabriela 230

I would like to temporarily disable MFA for testing purposes. I am a Global Administrator and have already taken the following steps:

Verified that Security Defaults are disabled on the Entra ID tenant

Disabled System-preferred MFA

Disabled the Registration Campaign

Confirmed that there are no Conditional Access policies or per-user MFA settings enforcing MFA

Signed out, cleared the browser cache, and signed back in

Despite these steps, I am still being prompted to register for MFA upon login.

Please advise if there is any additional configuration that needs to be adjusted to fully disable MFA for this testing period. MFA will be re-enabled afterward.

JimmySalian-2011 42,451 Reputation points

2025-04-17T15:15:35.74+00:00

HI,

Just a suggestion it is a high risk and bad practice to set MFA Disabled for a Global Admin Role user. Can you setup a new user and do the testing on that one? Just in case you dont want to lock yourself out. So create a new test account and do all the testing with that instead of fiddling with the main account.

Also check the status after you are able to bypass exclude the user -

Get-MsolUser -UserPrincipalName <UserPrincipalName> | Select-Object UserPrincipalName, StrongAuthenticationRequirements

I will suggest you create a CA policy and add all users, in the exclusion add the new test admin account to bypass all the MFA requirements.

Please check this thread as it has same info and steps.

Hope this helps.

JS

==

Please accept as answer and do a Thumbs-up to upvote this response if you are satisfied with the community help. Your upvote will be beneficial for the community users facing similar issues.

Accepted answer

0 additional answers

Your answer

JimmySalian-2011 42,451 Reputation points

2025-04-17T15:15:35.74+00:00

HI,

Just a suggestion it is a high risk and bad practice to set MFA Disabled for a Global Admin Role user. Can you setup a new user and do the testing on that one? Just in case you dont want to lock yourself out. So create a new test account and do all the testing with that instead of fiddling with the main account.

Also check the status after you are able to bypass exclude the user -

Get-MsolUser -UserPrincipalName <UserPrincipalName> | Select-Object UserPrincipalName, StrongAuthenticationRequirements

I will suggest you create a CA policy and add all users, in the exclusion add the new test admin account to bypass all the MFA requirements.

Please check this thread as it has same info and steps.

Hope this helps.

JS

==

Please accept as answer and do a Thumbs-up to upvote this response if you are satisfied with the community help. Your upvote will be beneficial for the community users facing similar issues.

Answer 1

Hello @Schifter, Gabriela,

The prompt for MFA registration is coming up because of Mandatory MFA enforcement by Microsoft on admin portal logins. In this scenario whenever any user is trying to login into any admin portal they will be prompted for MFA completion or registration if they have not already registered for MFA.

Mandatory MFA isn't configurable. It's implemented separately from any access policies configured in the tenant.

Unfortunately, there is no exception to this enforcement as the changes have been applied globally.

Kindly refer the below documents for detailed information on the enforcement as well as related FAQs.
Mandatory-multifactor-authentication.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Share via

How to disable MFA for testing

0 additional answers

Your answer