Disabling mandatory MS Authenticator app

Anonymous
2023-09-12T11:08:43+00:00

Good afternoon,

We have text and call authentication set up as multi factor authentication for our users.

This has worked very well up until recently, when Microsoft have started to force the option of the authenticator app on users, and made it unskippable despite our setup.

The option to skip is not present on the "improve your sign ins" screen.

Where is the setting to disable the forcing of the authenticator app for the user?

I have seen on other posts there are options to disable this. For example here: https://learn.microsoft.com/en-us/answers/questions/1338546/users-are-being-forced-to-use-microsoft-authentica

If, as in the screenshot in the "accepted answer" post we change the registration campaign status to disabled, does this remove the enforced app prompt?

At present it is currently set to "Microsoft managed".

We are fine with the app as an OPTION however it should not be mandatory as it does exclude people who do not have the latest phones, or indeed, any smart phone.

Chris

Microsoft 365 and Office | Subscription, account, billing | For business | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

64 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2024-09-30T21:16:38+00:00

    Agreed. It even gives you grief if you log into a new computer, but you already HAVE the app. It still won't let you carry on.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2024-09-30T21:20:45+00:00

    Here is the proper way. There are options to ignore changes until Oct 1 this entire time.

    Also opening a ticket IN the azure portal will provide excellent support (I am a MS reseller)

    https://entra.microsoft.com/#view/Microsoft\_AAD\_IAM/AuthenticationMethodsMenuBlade/~/AdminAuthMethods/fromNav/

    It should be on the "new experience" you will see all the types of authentication methods. Disable or enable as desired. You can target and/or exclude groups

    Also go to manage migration and set to complete once done

    Also search for authenticator campaign and disable

    Lastly verify there are no conditional access rules that also require MFA, if desired

    Was this answer helpful?

    0 comments
  3. Anonymous
    2024-09-30T21:30:31+00:00

    If computer is not "trusted" there could be a conditional access rule to enforce mfa. All you need to do is open support ticket in azure/entra they will find the issue

    Was this answer helpful?

    0 comments
  4. Anonymous
    2024-09-30T21:31:26+00:00

    That is a setting called authenticator campaign or such. Disable it.

    Was this answer helpful?

    0 comments
  5. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more