Azure active Directory Authentication

Question

Hello, guys

How can i disable Azure active Directory Authentication?

Answer 1

Hello @Gabriel Rozzato ,

Thank you for reaching out Microsoft Q&A.

I understand that you want to disable Microsoft Entra ID (formerly known as Azure Active Directory) authentication for the users. Please correct me if I’m wrong.

To disable Microsoft Entra ID authentication for the users, you can use one of the following methods as mentioned below based on how you have enabled Multi factor Authentication for the users in your tenant.

1. Disable via Per-User MFA
2. Disable via Conditional Access Policy
3. Disable via Security Defaults
4. Disable via Identity Protection MFA registration policy.

If you are using Per-User Multi-Factor Authentication (MFA) to enforce MFA for the users, you can disable MFA for specific users by following the below mentioned steps:

Steps: Please sign in to Azure Portal using Global Administrator account and then select Microsoft Entra ID → Users.

1. On the user's tab Select Per-user MFA
2. Set the Multi-Factor Authentication State to Disabled.
   

If Conditional Access Policies enforces the users for Microsoft Entra ID Multi factor authentication, you can configure them to exclude specific users or groups that should bypass the MFA or if you don't want all the users in your tenant to use MFA, then you can completely disable the CA policy.

 

If Security Defaults are enabled in your Microsoft Entra ID tenant, it may enforce Microsoft Entra Multi factor authentication. You can disable Security Defaults entirely in your tenant. Steps to Disable Security Defaults:

1. Sign in to the Azure Portal atleast as a Security Administrator → Microsoft Entra ID.
2. Select Properties.
3. Click Manage Security Defaults at the bottom.
4. Set Security Defaults option to Disabled as mentioned in the below Screenshot and save changes.
   Security Defaults apply to all users globally. If you disable Security Defaults entirely, no user will need to authenticate via MFA.

If the Multi factor Authentication has been enforced through Identity Protection MFA registration policy, you can disable it by following the below mentioned steps.

1. Sign in to Azure portal atleast as a Security Administrator. Browse to Protection > Identity Protection > Multifactor authentication registration policy.
2. Set Policy enforcement to Disabled.
3. Select Save.

For additional information: Per user MFA, Conditional Access, Security Defaults. Configure the MFA registration policy - Microsoft Entra ID Protection | Microsoft Learn

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Regards,
Goutam Pratti.