Disabling mandatory MS Authenticator app

Anonymous
2023-09-12T11:08:43+00:00

Good afternoon,

We have text and call authentication set up as multi factor authentication for our users.

This has worked very well up until recently, when Microsoft have started to force the option of the authenticator app on users, and made it unskippable despite our setup.

The option to skip is not present on the "improve your sign ins" screen.

Where is the setting to disable the forcing of the authenticator app for the user?

I have seen on other posts there are options to disable this. For example here: https://learn.microsoft.com/en-us/answers/questions/1338546/users-are-being-forced-to-use-microsoft-authentica

If, as in the screenshot in the "accepted answer" post we change the registration campaign status to disabled, does this remove the enforced app prompt?

At present it is currently set to "Microsoft managed".

We are fine with the app as an OPTION however it should not be mandatory as it does exclude people who do not have the latest phones, or indeed, any smart phone.

Chris

Microsoft 365 and Office | Subscription, account, billing | For business | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

64 answers

Sort by: Newest
  1. Anonymous
    2024-07-01T15:06:28+00:00

    hello i am currently fighting this issue i cant access none of my accounts and need to figure out how to update the phone number so i can access them i cant get anyone on the phone please help

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2024-05-29T13:27:30+00:00

    Please read his question before answering. He does not want to force it bot, he wants to 'NOT" force the app, he also does not want to disable it, because some 'users' might actually want to use the app, while others, who don't have a smart phone, or the company does not pay for it, will want to use their desk phone to authenticate, 'NOT' their personal mobile phone. Despite MS delusions, most people still don't have a smart phone, or one with internet services. In my experience, no matter what you do, the app takes over. He doesn't want the app to take over. Now answer correctly, so we can all fix this. Even since MS forced MFA, this is all I do all day chasing around users who could log in one min, then can't the next. And my company would rather pay me to do something productive. users shouldn't need a personal smart phone with internet services just to read a company email. Is MS paying for this?

    Was this answer helpful?

    5 people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2024-05-17T16:48:33+00:00

    Disable Authentication app for select users

    1) In Microsoft Entra, (https://entra.microsoft.com/) open the "Protection" tab in the left menu.

    2) Select "Authentication methods."

    3) Go to "Registration campaign."

    4) If the campaign is set to "Microsoft managed," click "Edit." 

    5) Now click "Add users and groups" to select who to exclude.

    1. Save

    Had to call Microsoft support for help and this is what worked.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2024-05-08T13:33:01+00:00

    Sometimes changes I make in Entra, or Identify as it is now, take overnight to happen. I do not know why.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  5. Anonymous
    2024-04-20T05:24:10+00:00

    I bet copilot will solve it!!!!! hahahahahahahahahah. This has been a nightmare for me

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments