Trouble disabling multi-factor authentication for Office 365 and Azure AD for Office 365

Question

Looking for some assistance. Multi-factor authentication was initially enabled for our users in our Office 365 + Azure AD for Office 365 setup. I have now disabled MFA for all accounts but new users are still prompted to set up MFA and existing users who have deferred setting up MFA continue to be prompted.

Answer 1

Most likely because you have security defaults enabled: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

Or a similar CA policy. In any case, disabling MFA in this day and age is not a very good practice.