Turn off MFA for one user when Security Defaults are enabled

Question

Is it possible to Turn off MFA for one user when Security Defaults are enabled? If so, I have not found it. I already clicked on per user MFA and disabled MFA for that user, but I don't think it's working.

Answer 1

Hi @ARCC Admin • Thank you for reaching out.

Unfortunately, it is not possible to turn off MFA for specific user(s) when Security Defaults is enabled. Enabling Security Defaults in a tenant enables MFA for all users in that tenant. As it is a free offering, there is no fine grain control.

This can be done either via Conditional Access Policy or Per user MFA, which requires assigning required licenses to all the users leveraging Azure MFA.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Obviously there is a glitch in O365 Admin center interface, because when Security Defaults are ENABLED, this should also ENABLE User MFA settings...but no, if you look under User MFA, they are all DISABLED.

Also under authentication methods, MS Authenticator is shown DISABLED, but in fact it is preffered for each MFA login, which is forced.

So I guess MS has quite a lot to do with Admin interface...