MFA Authentication Methods User Removal

This guide will show an administrator how to revoke an existing allowed Authentication Method set from permitting end user registration.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: Identity Security

Domain: Multi-Factor Management

Modifies: Allowed MFA Methods (Passkey, Authenticator, SMS, etc.)

Entra ID Security MFA Authentication Methods User Removal

1. Navigate to the Authentication Strengths – Azure Active Directory portal, locate and select the Authentication Method you wish to remove end user registration abilities from.
   
2. Once inside of the desired Authentication Method, you can either deselect the Enable switch to revoke the ability users to register this method or select the X next to the desired Group(s) to revoke members of that group from registering this method. Once the proper adjustments have been made, select Save to finalize the Authentication Methods user removal process.
   

Need Assistance?