Disabling mandatory MS Authenticator app

Question

Good afternoon,

We have text and call authentication set up as multi factor authentication for our users.

This has worked very well up until recently, when Microsoft have started to force the option of the authenticator app on users, and made it unskippable despite our setup.

The option to skip is not present on the "improve your sign ins" screen.

Where is the setting to disable the forcing of the authenticator app for the user?

I have seen on other posts there are options to disable this. For example here: https://learn.microsoft.com/en-us/answers/questions/1338546/users-are-being-forced-to-use-microsoft-authentica

If, as in the screenshot in the "accepted answer" post we change the registration campaign status to disabled, does this remove the enforced app prompt?

At present it is currently set to "Microsoft managed".

We are fine with the app as an OPTION however it should not be mandatory as it does exclude people who do not have the latest phones, or indeed, any smart phone.

Chris

Answer 1

I have disabled Microsoft Authenticator in all three places and it still requires our users to download the app - cannot bypass whatsoever and despite it being more than three hours, still same situation. I have put in a ticket to Microsoft support, but this is extremely aggravating. We have an attorney (user) that is completely locked out of her email account! This is ridiculous!!! We received no email regarding this from Microsoft that it was going to enforce this in the fall! ****!

Answer 2

A lot of people are dealing with this same issue. You are right, it is ridiculous! I just spent the past 6 hours going through dozens of help articles.

I finally found one that worked! The link is below. Basically, you have to TURN OFF SECURITY DEFAULTS. After you do that, all the other options that you've already changed will take effect. I set mine up so that each user can choose whatever 2FA method they want. Hope this helps!

Link: Disable mandatory Microsoft Authenticator App - (Even though the title of the article says to enable it, it's the same steps).

Answer 3

Where did they get this idea from?! Who is the person responsible should be fired. This is the authoritarian version of forcing things onto people without consideration. I dont generally want certain apps on my phone and be forced to have this for work on my private phone is disgusting.

This inconsideration needs to be remedied asap. RIDICULOUS!!

Answer 4

Hello, Chris,

To disable the Microsoft Authenticator, or to prevent it from being mandatory, please follow the steps outlined in this video.

https://youtu.be/Gp8abF-G_VY?si=ti40r8vINIjL9s7P

You will need admin access to https://entra.microsoft.com which was formerly Azure AD.

We hope this helps.

Answer 5

Dear Chris11118

Good day! Thank you for posting to Microsoft Community. We are happy to help you!

Based on your description, to disable the mandatory Microsoft Authenticator app, please kindly follow these steps:

1. Sign in to the Azure portal as a global administrator or security administrator.
2. Go to Azure Active Directory > Security > MFA.
3. Under MFA settings, select Additional cloud-based MFA settings.
4. Under service settings, select Microsoft Authenticator app.
5. Change the setting to Disabled.

Please note that disabling the Microsoft Authenticator app may affect the security of your organization. We recommend that you consider the risks before disabling it.

If your problem persists, given that our forums do not have the relevant permissions and knowledge to fix your issue, please contact the Microsoft Authenticator App team, who have more experience and authority in this area and only handle queries related to the Microsoft Authenticator App, Therefore, I recommend contacting them by posting your question. Please submit thread here Microsoft Q & A (Microsoft Authenticator application).

Thanks in advance for your understanding! Your patience and cooperation will be highly appreciated. Hope you all the best! Merry Christmas to you in advance!

Sincerely,

Kerry Chen | Microsoft Community Moderator