MS 365: How to disable the two factor authentication from single user

[daniele]

Se l'utente NON ha MFA attiva ma è parte di un tenant con la impostazioni di default (post 2019), occorre PRIMA attivare e applicare le MFA (Users > Active Users > MFA impostazioni) e POI disattivarle.

It is important to know that MFA is not recommended to be disabled on user accounts.
In response to your query, you can disable MFA by following the below PowerShell code:

Connect-MsolService

Get the StrongAuthenticationRequirement configured to the user account

Code: Select all

(Get-MsolUser -UserPrincipalName account@keyman .com).Strong

Remove StrongAuthenticationRequirements from the user account

Code: Select all

$mfa = @()
Set-MsolUser -UserPrincipalName account@keyman .com -StrongAuthenticationRequirements $mfa

Verify MFA has been removed

Code: Select all

(Get-MsolUser -UserPrincipalName account@keyman .com).StrongAuthenticationRequirements

$User = Get-MSolUser -UserPrincipalName account@keyman .com
$User.StrongAuthenticationMethods

And you can also try to do this through the Azure Portal and account portal:

https://portal.azure.com/
https://account.activedirectory.windowsazure.com/

I would also suggest to Revoke multifactor authentication sessions and Revoke sessions for the user account.