Disabling mandatory MS Authenticator app

Anonymous
2023-09-12T11:08:43+00:00

Good afternoon,

We have text and call authentication set up as multi factor authentication for our users.

This has worked very well up until recently, when Microsoft have started to force the option of the authenticator app on users, and made it unskippable despite our setup.

The option to skip is not present on the "improve your sign ins" screen.

Where is the setting to disable the forcing of the authenticator app for the user?

I have seen on other posts there are options to disable this. For example here: https://learn.microsoft.com/en-us/answers/questions/1338546/users-are-being-forced-to-use-microsoft-authentica

If, as in the screenshot in the "accepted answer" post we change the registration campaign status to disabled, does this remove the enforced app prompt?

At present it is currently set to "Microsoft managed".

We are fine with the app as an OPTION however it should not be mandatory as it does exclude people who do not have the latest phones, or indeed, any smart phone.

Chris

Microsoft 365 and Office | Subscription, account, billing | For business | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

64 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2023-11-13T18:40:52+00:00

    Hey all,

    So we actually have some users who do not use smart-phones and are unable to use the authenticator app. Some of my users are more technically inclined and prefer the method. The way that I found which seemed to work is to actually disable the have the user do it individually.

    The first thing is to disable the Microsoft security defaults. This way it will allow you to bypass the requirement for the authenticator app.

    Sign in to the Microsoft Entra admin center as least a Security Administrator.

    1. Browse to Identity > Overview > Properties.
    2. Select Manage security defaults.
    3. Set Security defaults to Disabled.
    4. Select Save.

    Once that is disabled direct the users to update their security settings by following the directions here: https://support.microsoft.com/en-us/account-billing/change-your-two-step-verification-method-and-settings-c801d5ad-e0fc-4711-94d5-33ad5d4630f7

    Make sure the default is set to the users method and if authenticator was used it can be deleted.

    I just did this as a test on my account and it seemed to work.

    Definitely not the ideal scenario since the whole point is for administrators to be able to set things up so the users can just do their job, but Microsoft doesn't seem to think like this.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  2. Anonymous
    2023-11-13T22:49:04+00:00

    HELP. I am one person, not an organization, but I made the mistake of enabling Microsoft Authenticator. I can't remove it. I don't have Azure. How can I get rid of it?

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  3. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  4. Anonymous
    2023-11-13T23:25:57+00:00

    David,

    I assume you tried to turn it on thinking it would help, and maybe even heard some of the buzz words such as additional security, etc. I am also assuming that you are just a regular user with your own Microsoft 365 account. In order to disable this you should be able to disable and remove the Microsoft Authenticator app requirements by doing the following:

    To disable Microsoft Authenticator:

    1. Open the app on your device.
    2. Navigate to Settings and select Accounts.
    3. Choose the account you want to disable.
    4. Toggle the switch for two-step verification.

    To remove Microsoft Authenticator:

    1. Log in to your Microsoft account via a web browser.
    2. Go to Security settings and click on Additional security options.
    3. Choose Manage my sign-in methods.
    4. Select Remove next to Microsoft Authenticator.

    https://www.process.st/how-to/turn-off-microsoft-authenticator/

    I would also suggest that you do not remove it unless there is a major reason, such as inability to access your account. Please also consider starting another thread should you need further assistance.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  5. Anonymous
    2023-11-16T06:49:01+00:00

    Thank you ADynes.

    No thanks to you Microsoft!

    This is the solution that actually works to eliminate the forced use of Microsoft Authenticator app.
    What a pain.

    Per Joseph Happe's reply from October 20th 2023, you can enable the methods you want for MFA and life is back to normal.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments