Forum Discussion
MFA registration is asked even if it is set off everywhere
Hello
I have a user, that had previously MFA set up. I removed the MFA method from his settings.
When he logs in, he got's a prompt to set up MFA.
MFA is disabled per user. And there is not conditional access policy or security defaults enabled.
My question is, how to disable this promt and MFA entirely for this user.
Regards,
Pekka
Yes, seems that the issue is solved. SSPR was on for all users of the tenant.
I went on the registration prompts and set it up. After that the prompt has not been shown and still no MFA is required when logging in. I probably mixed MFA registration prompt and SSPR registration prompt. Sorry for the confusion and thank you for your helpful efforts! I hope this can help also others wondering the same thing.
Regards,
Pekka
Hello Pekka-Pek. So few things to check, is this a recent tenant with Security Defaults enabled? This may enforce MFA in certain cases. If Security Defaults is not enabled, and no Conditional Access policy exists that forces MFA, the only other option I can think of is the per user MFA setting. Once it is enabled for a user, it will turn to "enforced", and could cause the user to now be prompted continuously. When changing the per-user MFA, there's actually a 'disable' option, have you tried this?
- I would check what the output is using PowerShell and if necessary remove the StrongAuthenticationRequirement there.
Get-MsolUser -UserPrincipalName <username> | Set-MsolUser -StrongAuthenticationRequirements @()
- Pekka-Pek,
Supplement on top of pvanberlo, you can make sure the setting from the Azure AD admin center where can redirect from O365 Admin Center.
Link Reference:
https://techcommunity.microsoft.com/t5/user/viewprofilepage/user-id/982013
