Disabling mandatory MS Authenticator app

David,

I assume you tried to turn it on thinking it would help, and maybe even heard some of the buzz words such as additional security, etc. I am also assuming that you are just a regular user with your own Microsoft 365 account. In order to disable this you should be able to disable and remove the Microsoft Authenticator app requirements by doing the following:

To disable Microsoft Authenticator:

1. Open the app on your device.
2. Navigate to Settings and select Accounts.
3. Choose the account you want to disable.
4. Toggle the switch for two-step verification.

To remove Microsoft Authenticator:

1. Log in to your Microsoft account via a web browser.
2. Go to Security settings and click on Additional security options.
3. Choose Manage my sign-in methods.
4. Select Remove next to Microsoft Authenticator.

https://www.process.st/how-to/turn-off-microsoft-authenticator/

I would also suggest that you do not remove it unless there is a major reason, such as inability to access your account. Please also consider starting another thread should you need further assistance.

HELP. I am one person, not an organization, but I made the mistake of enabling Microsoft Authenticator. I can't remove it. I don't have Azure. How can I get rid of it?

Hey all,

So we actually have some users who do not use smart-phones and are unable to use the authenticator app. Some of my users are more technically inclined and prefer the method. The way that I found which seemed to work is to actually disable the have the user do it individually.

The first thing is to disable the Microsoft security defaults. This way it will allow you to bypass the requirement for the authenticator app.

Sign in to the Microsoft Entra admin center as least a Security Administrator.

1. Browse to Identity > Overview > Properties.
2. Select Manage security defaults.
3. Set Security defaults to Disabled.
4. Select Save.

Once that is disabled direct the users to update their security settings by following the directions here: https://support.microsoft.com/en-us/account-billing/change-your-two-step-verification-method-and-settings-c801d5ad-e0fc-4711-94d5-33ad5d4630f7

Make sure the default is set to the users method and if authenticator was used it can be deleted.

I just did this as a test on my account and it seemed to work.

Definitely not the ideal scenario since the whole point is for administrators to be able to set things up so the users can just do their job, but Microsoft doesn't seem to think like this.

You first need to disable security defaults then in order to remove the requirement for MFA (specifically MS Authenticator App). Here are the steps:

1. Go to the Microsoft Entra admin center (https://entra.microsoft.com/) and sign in.
2. Under Microsoft Entra ID (Azure AD), select Go to Microsoft Entra ID.
3. Select Properties, scroll down, and then select the Manage security defaults link.
4. On the right side of the screen, in the Security defaults pane, DISABLE security defaults, by using the drop-down menu to select Disable. Then select Save.
5. Approve all the necessary warnings. This will allow other MFA options through this link: https://entra.microsoft.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/~/AdminAuthMethods

Here's the link to the official help article. Microsoft tricks you by wording the article as the way to enable it, even though that's already the default. Just follow the same steps to disable.

https://learn.microsoft.com/en-us/microsoft-365/business-premium/m365bp-turn-on-mfa?view=o365-worldwide&tabs=secdefaults