External user access to SharePoint - Disable Microsoft Authenticator for MFA

Emily Paul 0 Reputation points
2026-09-10T12:46:14.2+00:00

I have a SharePoint site that is accessed by internal and external users. I used the "share site only" option in SharePoint to add the external users with View Only access.

We currently have MFA set up for external users but have been having LOTS of issues with Microsoft Authenticator getting stuck in a neverending authentication loop, especially for users that utilize multiple emails/accounts on their computers.

Would like to keep the MFA (email one-time passcode) but ditch Authenticator. I've been round and round in Entra and have been unable to accomplish this.

Thanks for assistance!

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments No comments

1 answer

Sort by: Most helpful
  1. Daniel-Vo 6,275 Reputation points Microsoft External Staff Moderator
    2026-09-10T14:18:31.3233333+00:00

    Hi,

    Based on my understanding, if your external users are Azure AD B2B guest accounts, the ability to use Email One-Time Passcode (OTP) instead of Microsoft Authenticator is controlled through Microsoft Entra External Identities authentication settings.

    If your goal is to keep MFA while avoiding Microsoft Authenticator, consider:

    1. Verify that Email One-Time Passcode (OTP) is enabled for external collaboration users.
    2. Review any Conditional Access policies that explicitly require Microsoft Authenticator or Authentication Strength policies.
    3. If Authentication Strength is enforced, modify the policy to allow other MFA methods or exclude guest users as appropriate.
    4. Test with a newly invited guest account to confirm the sign-in experience before making broader changes.

    As an independent advisor, I would also recommend reviewing your Conditional Access and External Identity configuration carefully, as tenant-wide MFA requirements may override the preferred Email OTP experience. 

    If the issue persists, please engage a Microsoft Support Engineer to review your tenant's authentication policies and sign-in logs, as the actual authentication method presented to guest users is often determined by multiple Entra ID security settings working together.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.