Disabling mandatory MS Authenticator app

Anonymous
2023-09-12T11:08:43+00:00

Good afternoon,

We have text and call authentication set up as multi factor authentication for our users.

This has worked very well up until recently, when Microsoft have started to force the option of the authenticator app on users, and made it unskippable despite our setup.

The option to skip is not present on the "improve your sign ins" screen.

Where is the setting to disable the forcing of the authenticator app for the user?

I have seen on other posts there are options to disable this. For example here: https://learn.microsoft.com/en-us/answers/questions/1338546/users-are-being-forced-to-use-microsoft-authentica

If, as in the screenshot in the "accepted answer" post we change the registration campaign status to disabled, does this remove the enforced app prompt?

At present it is currently set to "Microsoft managed".

We are fine with the app as an OPTION however it should not be mandatory as it does exclude people who do not have the latest phones, or indeed, any smart phone.

Chris

Microsoft 365 and Office | Subscription, account, billing | For business | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

64 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2023-09-12T13:39:08+00:00

    Dear Chris11118

    Good day! Thank you for posting to Microsoft Community. We are happy to help you!

    Based on your description, to disable the mandatory Microsoft Authenticator app, please kindly follow these steps:

    1. Sign in to the Azure portal as a global administrator or security administrator.
    2. Go to Azure Active Directory > Security > MFA.
    3. Under MFA settings, select Additional cloud-based MFA settings.
    4. Under service settings, select Microsoft Authenticator app.
    5. Change the setting to Disabled.

    Please note that disabling the Microsoft Authenticator app may affect the security of your organization. We recommend that you consider the risks before disabling it.

    If your problem persists, given that our forums do not have the relevant permissions and knowledge to fix your issue, please contact the Microsoft Authenticator App team, who have more experience and authority in this area and only handle queries related to the Microsoft Authenticator App, Therefore, I recommend contacting them by posting your question. Please submit thread here Microsoft Q & A (Microsoft Authenticator application).

    Thanks in advance for your understanding! Your patience and cooperation will be highly appreciated. Hope you all the best! Merry Christmas to you in advance!

    Sincerely,

    Kerry Chen | Microsoft Community Moderator

    Was this answer helpful?

    7 people found this answer helpful.
    0 comments
  2. Anonymous
    2023-09-12T14:37:03+00:00

    The question has been misread - we do not want to disable the thing entirely, just the forcing of it onto users!!!

    At present our users are not allowed to opt out from the app download. Previously the app was an option rather than mandatory.

    Was this answer helpful?

    40+ people found this answer helpful.
    0 comments
  3. Anonymous
    2023-09-14T15:33:33+00:00

    Dear Chris11118

    Thanks a lot for your feedback and very sorry for late reply!

    For information on how to force all users to use MFA, please kindly refer to this official document and the following screenshot:

    WIsh you have a wonderful day!

    Sincerely

    Kerry Chen | Microsoft Community Moderator

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  4. Anonymous
    2023-10-11T14:13:46+00:00

    It Seems that its very hard for Microsoft to understand the question at hand.

    Let me simplify.

    1: The Administrator DOES want to enforce MFA

    BUT does not want to enforce Microsoft Authenticator.

    Having MFA is important, but Microsoft deciding that all users should use Microsoft Auth as the standard is not correct.

    Extra: how to exclude specific users from MFA in Microsoft 365?

    Was this answer helpful?

    80+ people found this answer helpful.
    0 comments
  5. Anonymous
    2023-10-16T15:50:34+00:00

    It Seems that its very hard for Microsoft to understand the question at hand.

    Let me simplify.

    1: The Administrator DOES want to enforce MFA

    BUT does not want to enforce Microsoft Authenticator.

    Having MFA is important, but Microsoft deciding that all users should use Microsoft Auth as the standard is not correct.

    Extra: how to exclude specific users from MFA in Microsoft 365?

    What I was able to find: How to migrate to the Authentication methods policy - Microsoft Entra | Microsoft Learn

    I was able to "uncheck" the Notification through mobile app and the Verification code from mobile app or hardware token. Hopefully this works.

    Note: this is for ALL Users (not specific).

    Was this answer helpful?

    4 people found this answer helpful.
    0 comments