Forum Discussion
MFA, Can not change from SMS to Authenticator app
- Aug 23, 2021Hi,
I went and did some more research on the Azure admin center. Found out that in the "Security" section -> "Manage" -> "Authentication Methods" -> Microsoft Authenticator was turned off.
After enabling it, I can now change the default sign-in method.
Thanks for your help!
ChristianJBergstromThanks for the reply.
I checked and confirmed that Security defaults is turned on. There is no conditional access set up. All licenses are either Business Basic or Business Standard. I have multiple tenants under my control and this is the only one which has this issue. Like said, users can setup the Microsoft Authenticator app, but can not se it as the default sign-in method.
Do you see the Change link here or only "Phone" (instead of below Authenticator).
https://mysignins.microsoft.com/security-info
What makes me wonder is "these free security defaults allow registration and use of Azure AD Multi-Factor Authentication using only the Microsoft Authenticator app using notifications."
Thinking you might hit a bug or something. Perhaps raise a case with Microsoft?
- vtekfiAug 23, 2021Copper ContributorHi,
I went and did some more research on the Azure admin center. Found out that in the "Security" section -> "Manage" -> "Authentication Methods" -> Microsoft Authenticator was turned off.
After enabling it, I can now change the default sign-in method.
Thanks for your help!- Aug 23, 2021Great. No worries. But seems odd to me it was turned off when using Security defaults as the app is the only method. I mean, you didn't have to do this on your other tenants right? I will probably do a test later on to see the outcome.
- vtekfiAug 23, 2021Copper ContributorYes, you are correct. This was the only tenant having this issue. Others have worked fine. Bit odd, like you said.