MS 365: How to disable the two factor authentication from single user

Azure, MS 365, MS Online
Post Reply
daniele
Posts: 327
Joined: 04 Mar 2009, 13:59

MS 365: How to disable the two factor authentication from single user

Post by daniele »

Se l'utente NON ha MFA attiva ma è parte di un tenant con la impostazioni di default (post 2019), occorre PRIMA attivare e applicare le MFA (Users > Active Users > MFA impostazioni) e POI disattivarle.

It is important to know that MFA is not recommended to be disabled on user accounts.
In response to your query, you can disable MFA by following the below PowerShell code:

Connect-MsolService

Get the StrongAuthenticationRequirement configured to the user account

Code: Select all

(Get-MsolUser -UserPrincipalName account@keyman .com).Strong
Remove StrongAuthenticationRequirements from the user account

Code: Select all

$mfa = @()
Set-MsolUser -UserPrincipalName account@keyman .com -StrongAuthenticationRequirements $mfa
Verify MFA has been removed

Code: Select all

(Get-MsolUser -UserPrincipalName account@keyman .com).StrongAuthenticationRequirements

$User = Get-MSolUser -UserPrincipalName account@keyman .com
$User.StrongAuthenticationMethods
And you can also try to do this through the Azure Portal and account portal:

https://portal.azure.com/
https://account.activedirectory.windowsazure.com/

I would also suggest to Revoke multifactor authentication sessions and Revoke sessions for the user account.
Post Reply