MFA activated for all new users

EDS 26 Reputation points
2022-06-24T11:42:16.21+00:00

Hello, I just realized that for all new accounts, MFA activation is requested each time they connect to office applications. However, our conditional access does not require the MFA and "Default security settings" are disabled for our tenant. Older accounts are not impacted.
214777-image.png

214824-image.png

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,453 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 95,181 Reputation points MVP
    2022-06-24T13:22:55.713+00:00

    That's likely the SSPR registration prompt. This thread lists all the places you should check in order to narrow down the feature causing this: https://learn.microsoft.com/en-us/answers/questions/645850/what-are-the-servicessettings-that-can-cause-mfamf.html

    1 person found this answer helpful.
  2. Carlos Solís Salazar 16,436 Reputation points
    2022-06-24T12:58:12.29+00:00

    Hi @EDS

    Thank you for asking this question on the **Microsoft Q&A Platform. **

    Could be for other settings,

    Validate that the user does not have "Enabled" or "Force" in the MULTI-FACTOR AUTH STATUS --> https://account.activedirectory.windowsazure.com/UserManagement/MultifactorVerification.aspx?BrandContextID=O365

    Hope this helps,
    Carlos Solís Salazar

    ----------

    Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.
    NOTE: To answer you as quickly as possible, please mention me in your reply.