office 365 - multi-factor authentication

Copper Contributor

Hi,

I want to disable the option that user on office 

can log to his office.com account and under his Security info tab

to edit / delete his 2 factor authentication 

 

I want only to do it for user - on 365 admin

 

How to set it work?

 

Thanks.

3 Replies

You cannot prevent users from editing their own MFA methods, if that's what you mean. You can only turn MFA on/off for the user (as in make it required on login).

@Vasil Michev 

 

But he can delete those 2

and it will remove 2 factor authentication from his account

No, it will remove the *methods* they have registered, but they will still be required to perform MFA (and register methods anew if they remove them all).