Hi @J S ,
Hopefully, this point you in the right direction.
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
We're looking to update and improve our MFA security settings for our Azure portal.
Objectives:
Problem:
Question:
How do we disable Azure asking for phone number as an authentication backup method? Without providing a phone number to text it won't let our users go forward with finalizing a device for MFA setup.
Potentially Important Information:
Our license type is: Azure AD Free
@J S
Thank you for your post!
When it comes to users being prompted to add a phone number, can you see if disabling the "Call to phone" and "Text message to phone" verification options help resolve your issue?
If the Per-User MFA settings don't resolve your issue, can you see if your Azure Tenant is registered for Combined Registration? If so, you should be able to set the combined security information registration experience feature to "None". For more info.
You can also check if your tenant is enabled for SSPR, since the phone number could be a required for SSPR purposes and not MFA.
When it comes to having multiple methods of authentication this should also prevent users from being accidentally locked out of your Azure Active Directory tenant due to the loss of a password, YubiKey, or access to their MS Authenticator.
Additional Links:
Unable to reset password and access authenticator app
Manage emergency access accounts in Azure AD
A user or an administrator forgot his or her password in Office 365, Azure, or Intune
I hope this helps!
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
----------
Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
Oh wow! Both of your answers were fantastic! Thanks so much to you both.
When removing the call option the users are getting a popup/snip with both options = SMS, and CALL.
Is it possible to remove the Call option (visually - cosmetic) in the snip? and leave only SMS?
I know it is a cosmetic option but it should be possible.