Microsoft MFA Office 365 is a great security feature, but sometimes, it might cause you complications logging into other devices or console apps.
So how to disable MFA Office 365? With the article below, let’s get started and discover the most straightforward methods of removing the feature for quicker access.
What Is MFA Office 365?
Office 365’s Multi-Factor Authentication, or MFA, is an additional security feature to verify that the person attempting to log in to Office Online and the person who claims the account is the same.
MFA is built on the Azure Multi-Factor Authentication system, so Microsoft customers are urged to utilize numerous MFA verification ways. They include:
- SMS message confirmation using a one-time password;
- A phone call to confirm the one-time password;
- Using the Microsoft Verification application on a mobile device.
How To Disable MFA Office 365?
Disable MFA Office 365 Using Microsoft 365 Admin Center
Step 1. Visit the Office Admin Center and log in using a user account that has tenancy Global administrator capabilities;
Step 2. Click Users and choose Active Users;
Step 3. Select Multi-Factor Authentification on the top menu.
Step 4. A page listing all the members of Microsoft 365 tenancy and their MFA status will display.
Step 5. Click on it to turn off MFA for that user.
Step 6. You will see several buttons on the right side of the column that you can use to adjust user settings or enable, deactivate, or disable MFA. Click Disable and then agree to turn off MFA.
Disable MFA Office 365 Using PowerShell
You must execute the following steps and commands to turn off the MFA Office 365 with PowerShell.
Step 1. Check to see if your computer includes the Microsoft 365 module.
Step 2. In case your computer does not have this feature, you need to install it by typing in the command:
Install-Module MSOnline.
Step 3. Now access to your Office 365 tenancy:
$MSOCred = Get-Credential
Connect-MsolService -Credential $MSOCred
Step 4. Then you can check whether MFA 365 is turning on or off with the command:
$user=Get-MsolUser–UserPrincipalName [email protected]
$user| select DisplayName,UserPrincipalName,@{N=”MFA Status”; E={ if( $_.StrongAuthenticationMethods.IsDefault -eq $true) {($_.StrongAuthenticationMethods | Where IsDefault -eq $True).MethodType} else { “Disabled”}}}
Step 5. To disable the MFA 365, type in:
Get-MsolUser -UserPrincipalName < UserPrincipalName > | Set-MsolUser -StrongAuthenticationRequirements @()
Or you can execute this other command to remove the multi-authentication feature:
Set-MsolUser -UserPrincipalName [email protected] -StrongAuthenticationRequirements @()
Step 6. Press Enter, and you have successfully disabled MFA 365.
FAQs
How To Check MFA Office 365 Status In Microsoft?
You may see the MFA mode of Office 365 users using the Microsoft Graph PowerShell or Microsoft Graph API. The Get-MsolUser cmdlet and MS Graph are two distinct ways to retrieve MFA status.
MFA state is not explicitly provided by Microsoft Graph as allowed, applied, or disabled. Alternatively, it will display a user’s specified authentication methods list. The authentication mechanism must be used to determine the MFA state.
How To Enable MFA Office 365?
Step 1. Sign in to your Exchange Online account first, select Users and choose Active Users. Another window will pop up.
Step 2. Select Multi-factor Authentication Setup from the drop-down box after clicking More.
Step 3. Check the box next to the Office 365 user whose MFA you wish to activate. A new window of the selected mailbox will display on the right screen when you pick it.
Step 4. Select the Enable option, Enable Multi-Factor Auth, and click Close to finish. The MFA to Office 365 account has now been configured.
*Note: For Multi-Factor Authentication in Bulk Activation, follow the below steps:
- You must produce a CSV file with all the required information in the format provided and save it from enabling multiple MFA for various users.
- On the multi-factor verification option page, click the Bulk Update button.
- Select Browse For File and add the CSV file. As you click the Next Arrow, the CSV is validated. After being confirmed once more, release the next arrow. All Exchange Online mailboxes included in the CSV will now have MFA assigned to them.
What Happens If I Lose My Second Authentication Device For MFA Office 365?
If you, unfortunately, lose your phone or can not log in to your email address, you should immediately call the Service Desk and ask for a new MFA reset.
Therefore, to avoid any risk, all users had better set up additional forms of authentication to help prevent problems if a phone or other device is not accessible.
Conclusion
MFA Office 365 is a great security feature for any Microsoft user. However, if you want to disable it, you can go to Microsoft Admin Center or use PowerShell. Both methods are not very challenging to follow. But if you still struggle with any step, visit our Trustguide to gain more support!
Leave a Reply