Switch off two factor authentication

[Lazar3b]

Dear community members,

We've created a free MS Teams group. After a while the login process started to force two factor authentication. It can be delayed for 14 days. I would like to switch that off completely for the whole group, because (1) there is nothing sensitive in the group from security point of view (classroom team) and (2) many of the members had problems with the registration which will now become even harder with the two factor authentication.

Thank you for any hints, help!

[Lazar3b]

Dear community members,

We've created a free MS Teams group. After a while the login process started to force two factor authentication. It can be delayed for 14 days. I would like to switch that off completely for the whole group, because (1) there is nothing sensitive in the group from security point of view (classroom team) and (2) many of the members had problems with the registration which will now become even harder with the two factor authentication.

Thank you for any hints, help!

[#3]

@Lazar3b 

Hi,

I have excatly the same issue/question. Any ideas?

[#4 · Accepted solution]

That's not two-factor auth, that's the registration feature for SSPR/MFA: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr...

You can toggle the corresponding policies via the Azure AD portal: https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/PasswordReset

[#5]

@Vasil Michev, thank you for the answer! The trick was to switch off "Security defaults".

[#6]

@Lazar3bSame problem here. Where can we find the switch off "Security defaults" option?

[#7]

@almeidap , sign in and use the portal.azure link given above. On the top of the page in the navigation bar click the name of your group, then select "Properties" from the menu on the left. In the bottom of the page click "Manage security defaults" link, which opens the "Enable Security defaults" toggle on the right.
Seems like they intentionally made this more complex then it should be...

[#8]

@Lazar3b 

https://docs.microsoft.com/ru-ru/azure/active-directory/fundamentals/concept-fundamentals-security-d...

Disable MFA for organization

[#9]

@Vasil Michev Microsoft required me to type in my phone number after registering this work email. I could not type in the office number as it has an extension. So, I had to use my cell. This account is accessed by multiple people. I just want to make sure that they can access it without asking me for a code.