Two Factor Authentication Issue

Question

Two Factor Authentication has been forced upon all users who aren't already using it. I have a user that doesn't have a phone, therefore cannot use the authenticator app, and it doesn't even give the option to use a phone number. This user cannot get onto the system and this is a big problem. I have already disabled Security Defaults in an effort to stop the forced use of 2FA, to no avail. It is still asking the user to sign up, and they can't.

I need to get this user on the system without 2FA. Please help.

Answer 1

Christopher,

These are consumer forums and as such aren't the place you need to be asking this question, since the knowledge of Azure AD specifics is limited for most posting here.

Apparently, this has been a problem for a few organizations for different reasons including your issue that no cell phone is available, along with other countries which don't allow 'forcing' employees to use their cell phones (or other devices) for work purposes.

I did a search and found this thread in the Microsoft Azure Community forums where you need to be posting that discusses this in some depth, with ideas like using FIDO2 (USB) keys or other techniques, as well as mention in at least the last post currently on the 4th page of the thread of something called 'Conditional Access' that might be worth looking into. I only looked at the first and 4th pages of that thread, so there may be other options within the thread.

MFA without a Cellphone - Microsoft Community Hub

I know this doesn't solve your immediate problem, but it's the only set of solutions I could quickly find via search.

Rob

Answer 2

Is the user able to use an email address? What system do they need to get on? Does this person work for you, then buy the person a cell phone.