MFA & Verification Issues

Fix Microsoft 365 and Entra MFA Status Displaying Incorrectly

Phi Hung Vo Oct 7, 2026 869 views

Question details

Administrators notice that multifactor authentication appears disabled for certain users in the legacy Microsoft 365 MFA portal, even though these users are actively prompted for MFA during sign-in.

How to Fix Microsoft 365 and Entra MFA Status Displaying Incorrectly

Product: Microsoft 365 and Microsoft Entra
Device & OS: not provided
Scenario: Reviewing user authentication statuses or attempting to manage MFA settings and authentication methods.
Observed behavior: The legacy M365 MFA portal displays an incorrect disabled status for users who actually have MFA enforced. Additionally, administrators encounter errors when trying to manage MFA settings or authentication methods directly in Microsoft Entra.

Before you start

Ensure you have the necessary Global Administrator or Authentication Administrator privileges in your Microsoft Entra tenant before attempting to run Graph PowerShell scripts or modify tenant settings.

Solution 1Recommended

Verify and Manage MFA Configuration via Microsoft Graph PowerShell

Use Microsoft Graph PowerShell to bypass legacy portal UI synchronization issues and accurately read or update user MFA settings.

The legacy Microsoft 365 MFA portal is being deprecated, which frequently leads to inconsistent display states compared to the actual authentication policies enforced in the backend. Microsoft Graph PowerShell queries the real-time configuration.

Open Windows PowerShell

Right-click the Start menu and select Windows PowerShell (Admin) or Terminal (Admin) to launch the command line with elevated privileges.

Connect to Microsoft Graph

Type the command 'Connect-MgGraph -Scopes "UserAuthenticationMethod.ReadWrite.All"' and press Enter. Sign in with your administrator credentials when prompted.

Verify the Authentication Methods

Run 'Get-MgUserAuthenticationMethod -UserId <user-principal-name>' to accurately check the active MFA methods tied to the affected user. If adjustments are needed, use the corresponding Graph commands rather than the legacy UI.

Verify and Manage MFA Configuration via Microsoft Graph PowerShell

Module Installation Required: If you do not have the Graph module installed, run 'Install-Module Microsoft.Graph -Scope CurrentUser' before attempting to connect.

Solution 2

Open a Microsoft Support Request

If PowerShell commands also return errors or backend permission synchronization is corrupted, escalate the issue to the Microsoft 365 service team.

Free Microsoft Office alternative

Switch to WPS Office for a Hassle-Free Productivity Experience

Managing complex Microsoft 365 enterprise portals and troubleshooting backend sync issues can be time-consuming. For your team's everyday document creation, editing, and sharing needs, consider WPS Office as a lightweight, powerful, and free alternative.

1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
2. Install WPS Office: Run the downloaded executable file and follow the straightforward on-screen instructions to complete the installation.
3. Open Office Files: Right-click any existing Microsoft Word, Excel, or PowerPoint document, select 'Open with', and choose WPS Office to start working immediately.

Avoid complex tenant configurations and synchronization glitches completelyFully compatible with Microsoft Office formats including .docx, .xlsx, and .pptxLightweight application with significantly faster launch and installation timesFamiliar user interface that requires zero learning curve for seamless migration

microsoft office alternative - wps office

Frequently Asked Questions

Why does the legacy Microsoft 365 portal show MFA as disabled when it is actually active?

Microsoft is transitioning multifactor authentication management entirely to Microsoft Entra. As a result, the legacy portal frequently experiences synchronization delays and UI glitches, failing to accurately reflect conditional access policies or modern security default settings.

How do I gather network traces for a Microsoft support ticket?

Open your web browser's Developer Tools (typically by pressing F12), navigate to the Network tab, and ensure 'Preserve log' is checked. Reproduce the MFA management error in the Entra portal, then right-click the network activity and select 'Save all as HAR with content' to attach to your ticket.

Where should I manage MFA settings instead of the legacy portal?

It is highly recommended to manage all user multifactor authentication settings and authentication methods using Microsoft Entra Admin Center (under Protection > Authentication methods) or via Conditional Access policies, rather than relying on the legacy M365 MFA portal.

Login & Account Issues