Share via

MFA activated for all new users

EDS 26 Reputation points
2022-06-24T11:42:16.21+00:00

Hello, I just realized that for all new accounts, MFA activation is requested each time they connect to office applications. However, our conditional access does not require the MFA and "Default security settings" are disabled for our tenant. Older accounts are not impacted.
214777-image.png

214824-image.png

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 119.9K Reputation points MVP Volunteer Moderator
    2022-06-24T13:22:55.713+00:00

    That's likely the SSPR registration prompt. This thread lists all the places you should check in order to narrow down the feature causing this: https://learn.microsoft.com/en-us/answers/questions/645850/what-are-the-servicessettings-that-can-cause-mfamf.html

    1 person found this answer helpful.
  2. Carlos Solís Salazar 18,276 Reputation points MVP Volunteer Moderator
    2022-06-24T12:58:12.29+00:00

    Hi @EDS

    Thank you for asking this question on the **Microsoft Q&A Platform. **

    Could be for other settings,

    Validate that the user does not have "Enabled" or "Force" in the MULTI-FACTOR AUTH STATUS --> https://account.activedirectory.windowsazure.com/UserManagement/MultifactorVerification.aspx?BrandContextID=O365

    Hope this helps,
    Carlos Solís Salazar

    ----------

    Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.
    NOTE: To answer you as quickly as possible, please mention me in your reply.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.