Setting Microsoft Authenticator as default

%3CLINGO-SUB%20id%3D%22lingo-sub-2114131%22%20slang%3D%22en-US%22%3ESetting%20Microsoft%20Authenticator%20as%20default%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2114131%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3EWe%20support%20multiple%20MFA%20methods%20Authenticator%20app%2C%20text%2C%20call.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20to%20set%20Microsoft%20Authenticator%20as%20the%20default%20MFA%20Method%20and%20do%20not%20allow%20users%20to%20%22delete%2Fremove%22%20it%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2114131%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAccess%20Management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIdentity%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2114842%22%20slang%3D%22en-US%22%3ERe%3A%20Setting%20Microsoft%20Authenticator%20as%20default%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2114842%22%20slang%3D%22en-US%22%3EWell%2C%20if%20you%20remove%20the%20other%20options%20under%20MFA%20service%20settings.%3CBR%20%2F%3E%3CBR%20%2F%3EFrom%20the%20Preview%20link.%3CBR%20%2F%3E%E2%80%9DAzure%20AD%20lets%20you%20choose%20which%20authentication%20methods%20can%20be%20used%20during%20the%20sign-in%20process.%20Users%20then%20register%20for%20the%20methods%20they'd%20like%20to%20use.%E2%80%9D%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20can%20always%20select%20the%20%E2%80%9DUse%20a%20password%20instead%E2%80%9D%20link%20on%20the%20sign-in%20page%20to%20switch%20back%20to%20using%20your%20password%2C%20and%20the%20other%20way%20around.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fuser-help%2Fuser-help-auth-app-sign-in%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fuser-help%2Fuser-help-auth-app-sign-in%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2114768%22%20slang%3D%22en-US%22%3ERe%3A%20Setting%20Microsoft%20Authenticator%20as%20default%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2114768%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F551905%22%20target%3D%22_blank%22%3E%40ChristianBergstrom%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3EThank%20you%20for%20your%20response.%26nbsp%3B%20I%20do%20know%20how%20to%20enable%20MFA%20methods.%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EWe%20are%20trying%20to%20see%20if%20we%20can%20%22Force%20Authenticator%20as%20a%20method%20that%20cannot%20be%20removed.%22%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20you%20have%20multiple%20options%20available%20like%20authenticator%2Ftext%2Fphone%20call%20the%20user%20can%20%22delete%2Fremove%22%20authenticator%20and%20use%20only%20text%2Fphone.%26nbsp%3B%26nbsp%3B%3CBR%20%2F%3EWe%20want%20to%20ensure%20that%20Authenticator%20is%20Always%20the%20primary%20and%20couple%20of%20other%20options%20as%20secondary.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20do%20not%20see%20any%20documentation%20to%20be%20able%20to%20do%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2114400%22%20slang%3D%22en-US%22%3ERe%3A%20Setting%20Microsoft%20Authenticator%20as%20default%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2114400%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F359925%22%20target%3D%22_blank%22%3E%40JamesRV%3C%2FA%3E%26nbsp%3BHi%2C%20you%20can%20choose%20the%20available%20options%20in%20the%20MFA%20service%20settings%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fhowto-mfa-mfasettings%23mfa-service-settings%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EConfigure%20Azure%20AD%20Multi-Factor%20Authentication%20-%20Azure%20Active%20Directory%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20you%20also%20have%20the%20preview%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fauthentication%2Fhowto-authentication-passwordless-phone%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EPasswordless%20sign-in%20with%20the%20Microsoft%20Authenticator%20app%20-%20Azure%20Active%20Directory%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hello,

We support multiple MFA methods Authenticator app, text, call.

 

Is there a way to set Microsoft Authenticator as the default MFA Method and do not allow users to "delete/remove" it?

3 Replies

@ChristianBergstrom 
Thank you for your response.  I do know how to enable MFA methods. 

We are trying to see if we can "Force Authenticator as a method that cannot be removed." 

When you have multiple options available like authenticator/text/phone call the user can "delete/remove" authenticator and use only text/phone.  
We want to ensure that Authenticator is Always the primary and couple of other options as secondary.

I do not see any documentation to be able to do this.

Well, if you remove the other options under MFA service settings.

From the Preview link.
”Azure AD lets you choose which authentication methods can be used during the sign-in process. Users then register for the methods they'd like to use.”

You can always select the ”Use a password instead” link on the sign-in page to switch back to using your password, and the other way around.

https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-auth-app-sign-in