Share via

Disable MFA for tenant

Anonymous
2023-08-29T08:41:14+00:00

Hello everyone!

Is there a way to completly disable MFA for the whole tenant. I am also happy if there is a way to disable it on a user base.

Since Azure AD is called Microsoft Entra I cannot find a way to disable MFA there.

We are still in the migration process and MFA is not practical then. Once the migration is completed we will enable MFA again.

Thanks in advance.

Gerald

Microsoft 365 and Office | Subscription, account, billing | For business | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
  1. Anonymous
    2023-08-29T12:45:05+00:00

    Dear Gerard,

    Good day! Thank you for posting to Microsoft Community. We are happy to help you.

    Based on your description, I understand that you have a query "Disable MFA for tenant".

    Have you tried disabling the MFA for all organization by disabling the security defaults? Sign in to the Microsoft Entra admin center > Browse to Microsoft Entra ID (Azure AD) > Properties > Select Manage security defaults > Set Security defaults to disabled > Select Save. Refer to Providing a default level of security in Azure Active Directory - Microsoft Entra | Microsoft Learn.

    Image

    Please note that disabling MFA for the whole tenant is not recommended for security reasons. It is better to disable it on a user basis if it is not practical for your organization at the moment.

    To disable MFA for a user, Sign in to the Azure portal with your admin credentials > Go to Azure Active Directory > Select Users > Select the user you want to disable MFA for > Select Authentication methods > Under MFA, select Disable > Select Save.

    We look forward to hearing from you; Please note that our initial response does not always resolve the issue right away. However, with your help and more detailed information, we can work together to find a solution. Thank you for your help.

    Sincerely

    De Paul | Microsoft Community Moderator

    13 people found this answer helpful.
    0 comments

5 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. NoOneCan 7,620 Reputation points Volunteer Moderator
    2023-08-29T10:29:28+00:00

    You can Turn off Security defaults.

    1. Sign in to the Microsoft 365 admin center with global admin credentials.
    2. In the left nav choose Show All and under Admin centers, choose Azure Active Directory.
    3. In the Azure Active Directory admin center choose Azure Active Directory > Properties.
    4. At the bottom of the page, choose Manage Security defaults.
    5. Choose No to disable security defaults, and then choose Save.

    See https://dori-uw-1.kuma-moon.com/en-us/microsoft-365/admin/security-and-compliance/set-up-multi-factor-authentication?view=o365-worldwide#turn-security-defaults-on-or-off

    0 comments
  2. Anonymous
    2023-08-29T14:24:00+00:00

    Thank you very much!

    It works this way to disable MFA for the whole tenant.

    To disable MFA for a user, Sign in to the Azure portal with your admin credentials > Go to Azure Active Directory > Select Users > Select the user you want to disable MFA for > Select Authentication methods > Under MFA, select Disable > Select Save.

    I also tried to disable it on a user basis. But the way you discribed it does not work anymore. Azure AD is now Entra - although there is still "Authentication methods" availible under the selected user, you do can not disable MFA there anymore. - maybe I just don't see it.

    8 people found this answer helpful.
    0 comments
  3. Anonymous
    2023-10-18T13:22:58+00:00

    Very simple and helpful article.

    Thanks.

    0 comments
  4. Anonymous
    2023-12-29T12:14:09+00:00

    Related to this setting, if I change the global configuration so that MFA is off for all users will the reset MFA for all logged on/active users ? I understand I will need to go in and turn MFA on manually per user if I change this setting but I wanted to know if I then have to re-enroll all users that need MFA.

    I have a specific need where I have a 'kiosk' machine with limited access which multiple people will use and I don't want to have multiple logons for it.

    0 comments