Forum Discussion
Entra MFA for seniors using W365 Biz Basic
Entra MFA for seniors using W365 Biz Basic, these folks cannot and will not deal with mobile auth apps or keyfobs. This is a Historical Society. Need MFA bypass or non-technical solution that Senior Citizens with only enough knowlege to work MS Word can handle. There is zero risk of data loss or hackers or the like. We have nothing to lose as all is websearch and simple word docs. MFA without SMS or voice is going to put a lot of non-tech seniors out of their livelihoods. Need a simple non-tech solution. MS is so worried about CYA with regard to security, that they are pushing people out of technology. Do I have to go to Google Docs for a solution? Libre? It's not MS responsibility to remove all possibilities for poor decisions. Give us the tools for wise decisions, but quit binding us up. I need a solution or I'll have to move these folks off M365.
1 Reply
You are trying to keep senior users productive on Microsoft 365 Business Basic without an Authenticator app or hardware token. If the tenant uses Microsoft Entra security defaults, there is no supported per-user bypass: security defaults apply tenant-wide, require all users to register for MFA, and provide no customization. Calling these accounts “zero risk” does not remove exposure because email accounts remain attack targets. The safest path is assisted enrollment: install Authenticator on each user’s device, complete number matching together, and document recovery and replacement-phone procedures. A non-Microsoft OATH app can generate codes, but security-default registration still begins with Authenticator notifications. If individual exceptions are required, license Microsoft Entra ID P1 and replace security defaults with Conditional Access policies. Do not disable security defaults without replacement controls. If users accept no second factor, there is no secure Microsoft-supported solution; record and escalate that residual risk rather than bypassing MFA.
