Forum Discussion
Can disable Two-factor Authentication via Mobile
When sign-in Teams Essential account, Admin Center or Azure everytime, those need to verify code sent by mobile at input password later.
I tried add an Email Authenticate Method of Security Info but don't work. Tried to disabled the function in Extra-ID also don't working.
Have any method use Email instead of Mobile to verify?
Regards,
Diamond
3 Replies
By default MFA is force which you can exclude certain users and account however MFA is always recommended.
you can exclude from following 2 locations not to enforce MFA on those account/s and exclude them.
1- Conditional Access on azure
2 - conditional Access from Intune
both these two places are same so which ever is easy you can use it, remember you will need some permission to perform this action.
You can control how MFA is enforced or not enforced on mobile platforms using conditional access policies. However, MFA is always recommended.
If you move forward and using Microsoft Authenticator with the new Passkey freature as well, you can setup users for passwordless signin on their desktop and mobile devices.Please check on below:
- Check Security Info Settings
- Admin Center Configuration: Navigate to Users > Active Users, select the user, and adjust their multi-factor authentication settings.
- Conditional Access Policies: Configure conditional access policies to allow specific authentication methods. This might require enabling email-based verification explicitly.
