Azure AD MFA is disabled by default for AAD and Microsoft 365 users.

As part of our Server Management service, Bobcares responds to all inquiries, large and small.

Let’s examine Azure AD disable MFA’s details in more detail.

Azure AD disable MFA

The ability to turn MFA on or off for a specific user may be helpful in some circumstances. For instance, when working with Microsoft sample code that doesn’t account for MFA in a development or test tenant (like a simple Microsoft Graph console app). AAD security defaults must be disabled as part of this process.

The Azure Security Defaults set MFA to be forced by default for all new Azure tenants. All users must sign up for Azure AD Multi-Factor Authentication in order to use this option. Users have 14 days to download the Microsoft Authenticator app and register for Azure AD Multi-Factor Authentication. The user is prohibited from logging in after 14 days until registration is finished.

Disable MFA in Azure Active Directory

To disable force MFA for Azure tenant users, we must first disable Secure Defaults:

1. Firstly, log in to the Azure Portal.
2. Then go to Azure Active Directory.
3. Then click on Properties.
4. Select Manage Security Defaults.
5. Then, set Enable Security Defaults = No.

    
6. Finally, save the changes.

Enable or disable MFA per user.

1. Firstly, navigate to Azure AD > Users.
2. Select the Per-User MFA option.
3. Then, in the new window, locate and select the user.
4. To enable or disable MFA for the user, use the buttons in the right quick steps panel.

Use the MSOnline PowerShell module to turn MFA on or off for Azure users.

Connect to the Azure tenant after installing the PowerShell module:

Install-Module MSOnline

Connect-MsolService

To turn off MFA for a specific user:

Get-MsolUser -UserPrincipalName “bobcares_support@bobcares_domain.com” | Set-MsolUser -StrongAuthenticationRequirements @()

[Looking for a solution to another query? We are just a click away.]

Conclusion

In conclusion, the Azure Security Defaults enable MFA in a forced mode by default for all new Azure tenants. Our Support team described how to disable MFA in Azure AD.