vurpass.blogg.se

Microsoft account mfa settings
Microsoft account mfa settings




microsoft account mfa settings

That still leaves the issue that, if the user chose to enable MFA during initial account setup, this won't reflect in AAD. Account is now setup with password reset info needed but without MFA enabled. Then select Email for option 2 and complete that. Then complete the phone verification as it used to be done.

microsoft account mfa settings

For option 1, select Phone instead of Authenticator App from the dropdown. Indeed a non-MFA GA account is needed for hybrid operation as well as for any 3rd party services that need access to the 365 tenant.Īnyhow, the solution is to ignore the initial presentation of the setup. These force use of MFA for all accounts, despite Microsoft's own recommendation to have at least one GA account not using MFA in case of MFA issues. Turn on two-factor verification prompts on a trusted device Depending on your organization's settings, you may see a check box that says 'Don't ask again for n days' when you perform two-factor verification. Just more nonsense from unskilled product managers and developers with little experience of the real world and zero common sense. From the Microsoft Authenticator app, select the account you want to delete, then select Settings and Remove account. Indeed it's designed to make you think you have to set it up. It still allows a user to setup MFA even when it's disabled on the account in Azure. The combined approach is highly confusing when not wanting MFA. If MFA was enabled, they'd be prompted to setup MFA. Prior to this change, if you had self-service password reset enabled, on first login users would be prompted to setup a recovery phone and email. They've basically combined MFA setup with account recovery setup.

microsoft account mfa settings

This is all down to a new and ill-conceived UI from Microsoft.






Microsoft account mfa settings