Forum Discussion
Disable approval popup in MS Authenticator app
Hi, I have a tenant with MFA setup on all accounts and most people have used the Microsoft Authenticator app. Unfortunately someone was silly enough to press approve on their phone when they wer...
The Easiest way to disable this for your users is to go to Per-User MFA and disable it for the tenant.
https://account.activedirectory.windowsazure.com/UserManagement/MfaSettings.aspx
Disable Notifications through Mobile App.
This will disable it for everyone.
However, there are other options for you if you still want to keep notifications but make them more secure. Specifically Notifications Code Match. https://docs.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-number-match
you need to go to Azure AD to activate them, here is the link.
https://portal.azure.com/#blade/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/AdminAuthMethods
- How long does it take to get applied on all the users?
- The first method didn't work, I think because we have security defaults enabled so I don't think anything in that screen works.
But the second option is great, a notification with a short number code that needs to be put in is great, and enabling 'show additional context in notifications' shows more info about the login which is great too.
Thank you
