There are few other places where registration might be required, for example Azure AD Identity Protection driven MFA registration. Or the old-style per-user MFA controls. Or the Device join experience shown on your second screenshot, which in the default configuration will require the user to perform MFA.
Go to the Azure AD blade > Devices > Device settings > and toggle the "Require Multi-Factor Authentication to register or join devices with Azure AD" setting.
Although that should be done just to confirm that this setting is triggering the behavior you're observing. In this day and age, MFA is strongly recommended. Users can use personal mobile phones or if you're not allowed to use phones altogether, look into passwordless methods such as FIDO.
Getting "Your organisation requires more information" With Security defaults disabled, No conditional access policy, No SSPR and the user displaying as disabled in ad
We recently started an azure trial
So since the 30th new users who are created are asked for mfa details when signing into only dekstop office apps for the first time.
Even though SSPR is disabled, there are no condiditional policies and they display as disabled on mfa list on 365.
However if they login through office online they don't get the prompt.
The prompt they are getting is "Your organisation needs more details"
This is an issue as users dont have work mobiles
However noticed that on the screen before which says stay signed in to all your apps if you press sign into this app only the prompt also doesnt appear
-
Vasil Michev 108.1K Reputation points MVP
2021-07-02T18:31:57.03+00:00