Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Sometimes changes I make in Entra, or Identify as it is now, take overnight to happen. I do not know why.
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Good afternoon,
We have text and call authentication set up as multi factor authentication for our users.
This has worked very well up until recently, when Microsoft have started to force the option of the authenticator app on users, and made it unskippable despite our setup.
The option to skip is not present on the "improve your sign ins" screen.
Where is the setting to disable the forcing of the authenticator app for the user?
I have seen on other posts there are options to disable this. For example here: https://learn.microsoft.com/en-us/answers/questions/1338546/users-are-being-forced-to-use-microsoft-authentica
If, as in the screenshot in the "accepted answer" post we change the registration campaign status to disabled, does this remove the enforced app prompt?
At present it is currently set to "Microsoft managed".
We are fine with the app as an OPTION however it should not be mandatory as it does exclude people who do not have the latest phones, or indeed, any smart phone.
Chris
Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
Sometimes changes I make in Entra, or Identify as it is now, take overnight to happen. I do not know why.
Disable Authentication app for select users
1) In Microsoft Entra, (https://entra.microsoft.com/) open the "Protection" tab in the left menu.
2) Select "Authentication methods."
3) Go to "Registration campaign."
4) If the campaign is set to "Microsoft managed," click "Edit."
5) Now click "Add users and groups" to select who to exclude.
Had to call Microsoft support for help and this is what worked.
Please read his question before answering. He does not want to force it bot, he wants to 'NOT" force the app, he also does not want to disable it, because some 'users' might actually want to use the app, while others, who don't have a smart phone, or the company does not pay for it, will want to use their desk phone to authenticate, 'NOT' their personal mobile phone. Despite MS delusions, most people still don't have a smart phone, or one with internet services. In my experience, no matter what you do, the app takes over. He doesn't want the app to take over. Now answer correctly, so we can all fix this. Even since MS forced MFA, this is all I do all day chasing around users who could log in one min, then can't the next. And my company would rather pay me to do something productive. users shouldn't need a personal smart phone with internet services just to read a company email. Is MS paying for this?
hello i am currently fighting this issue i cant access none of my accounts and need to figure out how to update the phone number so i can access them i cant get anyone on the phone please help
Disable Authentication app for select users
1) In Microsoft Entra, (https://entra.microsoft.com/) open the "Protection" tab in the left menu.
2) Select "Authentication methods."
3) Go to "Registration campaign."
4) If the campaign is set to "Microsoft managed," click "Edit."
5) Now click "Add users and groups" to select who to exclude.
Had to call Microsoft support for help and this is what worked.