Turn two factor authentication off on certain users

Copper Contributor

You can disable 2fa for all users by disabling security defaults (*) but what is the correct way disable it only from certain users?

 

* - https://techcommunity.microsoft.com/t5/microsoft-365/how-to-disable-two-step-verification-for-all-us...

5 Replies
If MFA is enabled via Security defaults, you cannot selectively disable it for certain users, it's all or nothing.

@JohndeLance 

 

You cannot do this under security defaults enabled, you may consider conditional access instead

So what is the meaning of the exclude list on the Entra portal if it has no effect?
So you can define a group whose members do not apply, for example, the Authenticator application.
Not sure what list you are referring to, but there is no exclusion mechanism for security defaults.
Yes, there is because it is working on another tenant.
And it is not bypassing security defaults but only Authecticator on single user on that exclude group.