Microsoft Teams - Remove "Microsoft Authenticator" from "Keep your account secure" at login

Hello Marcus,

I'm Ibhadighi and I'd happily help you with your question. In this forum, we are Microsoft consumers just like yourself.

The prompt for using Microsoft Authenticator at login is likely part of the security defaults or conditional access policies set up in your Azure Active Directory (Azure AD) for your organization. Even if you have not explicitly enabled two-factor authentication (2FA) for new users, these security defaults may still encourage the use of the Authenticator app.

To adjust this so that Microsoft Authenticator is not the primary method shown to users, you will need to change the settings in the Azure portal. Here's a simplified answer and steps you can follow, assuming you have the necessary admin permissions:

1. **Log in to the Azure portal:** Go to the Azure portal and sign in with your admin account.
2. **Navigate to Azure Active Directory:** Find and select Azure Active Directory from the list of services.
3. **Go to Authentication methods:** Look for the 'Authentication methods' policy in Azure AD.
4. **Adjust User Settings:** Within the 'Authentication methods', you may find settings that dictate the methods available to users and the priority order.
5. **Change Policies:** If there are any conditional access policies set up that require or prompt the use of Microsoft Authenticator, you may need to adjust these. This can be found under 'Security' in Azure AD.
6. **Review Registration and Reset Policies:** There might also be self-service password reset policies that determine the methods available for users to verify their identity. Ensure that email verification is enabled here.
7. **Check Security Defaults:** If security defaults are enabled, they may automatically prefer the use of the Authenticator app. You can customize these settings, but be cautious as this may affect other security settings.

Please note that changes here can affect the security posture of your organization. It's important to balance the convenience for users with the need to keep accounts secure.

This indeed has nothing to do with 2FA if you haven't set it up. It's more about the initial account verification and recovery methods suggested by Microsoft's security policy defaults.

I hope this helps.

Best Regards, Ibhadighi

Thank you Ibhadighi!

Unfortunately, I can't find these options:

• Adjust User Settings
• Change Policies
• Review Registration and Reset Policies

This is what I see:

Hello Marcus,

Based on the image you've provided, it looks like you're in the Azure portal looking at the Authentication methods settings for your organization.

If you're not seeing the options to adjust user settings, change policies, or review registration and reset policies directly in this interface, you may need to navigate to different sections of the Azure portal. Here's what you can try:

Check the Authentication Methods Policy:

Go to the Azure Active Directory in the Azure portal. Click on Security, then Authentication methods. Make sure that the methods you want for your users are enabled, and others are disabled.

Check Multi-Factor Authentication Settings: Still in Azure Active Directory, click on Security, then on MFA. Ensure that the settings here align with what you want your users to experience.

Check Self-Service Password Reset (SSPR) Settings: Within Azure Active Directory, click on Password reset. Here you can define what methods are available for users when resetting their password.

If after checking these areas the issue persists: It could be that changes haven't propagated yet; they can sometimes take a little time. You may not have the necessary permissions to view or change some settings, in which case you might need to contact another admin.

I hope this helps,

Thank you, Ibhadighi

Sorry, but that doesn't help.

I also tried to disable the Registration Campaign. I have been waiting for a couple of days, but I haven't noticed any changes yet.