question

TayebLograda-2407 avatar image
0 Votes"
TayebLograda-2407 asked AmirCicak-1314 published

Why i can't add authentication method on user on Azure AD ? Greyed out

Hello everybody, I'm Global admin, and i want to add some authentication methods for users, but when i'm on AAD, everything is greyed out, Need some helps ![140721-azure-ad.png][1] Thanks, [1]: /answers/storage/attachments/140721-azure-ad.png

azure-active-directoryazure-ad-multi-factor-authentication
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I tried on my tenant with a global admin role and could not reproduce this, as I was able to access all of the greyed sections. Does this happen for all users or just some if you try to add the authentication methods? It looks like you are trying to do this in aad.portal.azure.com. Do you have the same issue if you do this from portal.azure.com? This should really only happen if you are using an account that does not have the right permissions, and the global admin account should have permission to do this.

0 Votes 0 ·

I also reached out to my contacts on the product team to see if they have any idea why this could be happening and will let you know when I have an update. I tried in both the admin center and the regular portal and it worked fine for my Global Admin account.

0 Votes 0 ·
TayebLograda-2407 avatar image
0 Votes"
TayebLograda-2407 answered MarileeTurscak-MSFT commented

Ok, thank you

I am waiting for your reply, this only happens on my account
For all other users I can add authentication methods

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Are you able to add them from https://account.activedirectory.windowsazure.com/ ?

If not, you can try creating a second global admin account to add the authentication methods to your account.

0 Votes 0 ·
TayebLograda-2407 avatar image
0 Votes"
TayebLograda-2407 answered MarileeTurscak-MSFT edited

Yes, i tried it and i can add from https://mysignins.microsoft.com/security-info

But still nothing on AAD portal, still greyed out

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Yes, I was able to reproduce this in my own tenant. I'm not sure whether this is expected and couldn't find it documented anywhere so I notified the product team. Will let you know as soon as I get a response. In the meantime, adding the authentication methods from the signins page or with a second global admin account does appear to work.

0 Votes 0 ·
RadoslawPiernicki-1272 avatar image
0 Votes"
RadoslawPiernicki-1272 answered

Hello there I have the exact same issue als global administrator that I can not change my own account settings only for others, this does not make sense, would be nice if Microsoft can come into this and tell why this is not working properly.

I can also change from https://mysignins.microsoft.com/security-info but this does not enable the MFA for Azure Login .

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MarileeTurscak-MSFT avatar image
0 Votes"
MarileeTurscak-MSFT answered AmirCicak-1314 published

The response from the PG is that this is due to the converged MFA/SSPR, which is enabled by default now for every tenant. https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr-combined

The Global Admin can only add the auth method such as mobile number or alternate mobile number on behalf of the user, but the user has to select his or her preferred mode of responding to the MFA and set this option up using the security info page.

Let me know if this helps answer this at all. I agree that it feels counterintuitive and inconsistent to be able to add it for everyone else and then have it greyed out for myself, and I have relayed that feedback to the product team.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

What if I am that user? I am global administrator and I want to add MFA for myself. I am logged in and everything is grayed out.

0 Votes 0 ·