MFA Security Issues

Fix Microsoft Authenticator Requesting MFA When Disabled

Ayan Masood Oct 1, 2026 868 views

Question details

Users are receiving unexpected Microsoft Authenticator approval requests even though per-user Multi-Factor Authentication (MFA) is turned off.

How to Fix Microsoft Authenticator Requesting MFA When Per-User MFA is Disabled

Product: Microsoft Authenticator
Device & OS: not provided
Scenario: Users are attempting to log in to Microsoft 365 services but are unexpectedly prompted by Microsoft Authenticator for MFA approval.
Observed behavior: The authentication system requests MFA approval despite per-user MFA and general Microsoft 365 security settings appearing to be disabled.

Before you start

Ensure you have Security Administrator or Global Administrator privileges in your Microsoft Entra (Azure AD) portal before attempting to change tenant-wide security settings.

Solution 1Recommended

Disable Microsoft Entra Security Defaults

Security defaults can enforce MFA for all users tenant-wide, overriding individual per-user MFA settings.

Microsoft enables security defaults for new tenants to provide a basic level of security. When this feature is active, it forces all users to register for and use Microsoft Authenticator for MFA, regardless of their per-user MFA status.

Sign in to Azure Portal

Navigate to the Azure portal and sign in using an account with Security Administrator privileges.

Navigate to Entra ID Properties

Go to 'Entra ID' (formerly Azure Active Directory) from the left-hand menu, then select 'Properties'.

Manage Security Defaults

Click the link for 'Manage security defaults' at the bottom of the properties pane.

Turn Off Security Defaults

Toggle the setting to 'Off', provide a reason for disabling it if prompted, and click 'Save'.

Disable Microsoft Entra Security Defaults

Solution 2

Check Group Policies and Conditional Access

Users might be subject to conditional access policies or group-based MFA enforcement that ignore per-user settings.

Solution 3

Clear Existing Authentication Methods via PowerShell

Clearing old or obsolete authentication methods can resolve Authenticator registration loops for specific users.

Free Microsoft Office alternative

Looking for a Hassle-Free Office Suite? Try WPS Office

While troubleshooting complex Microsoft 365 admin and MFA security issues, you might want a simpler, lightweight offline alternative for your daily document tasks. WPS Office provides a complete, free office suite without complex cloud authentication barriers.

1. Download the Installer: Visit the official WPS Office website and click the 'Download' button to get the free installer.
2. Install WPS Office: Run the downloaded file and follow the simple on-screen prompts to install the suite on your device.
3. Start Editing Instantly: Open WPS Office and instantly create or edit your documents, spreadsheets, and presentations without complex sign-in loops.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).Free and lightweight with no mandatory complex cloud MFA setups for local offline editing.Familiar user interface for a seamless migration from Microsoft Office.Includes built-in professional PDF editing and creation tools.

microsoft office alternative - wps office

Frequently Asked Questions

Why is Microsoft Authenticator prompting me when MFA is disabled?

This usually happens because tenant-wide Security Defaults or Conditional Access policies in Microsoft Entra are enabled, which automatically override individual per-user MFA settings.

How do I stop Microsoft Authenticator from asking for approval every time?

An IT administrator must either disable Microsoft Entra Security Defaults, exclude your account from specific Conditional Access policies, or reset your strong authentication methods in the Azure portal.

Can a user bypass the Authenticator registration loop themselves?

No. If you are stuck in an MFA registration loop and cannot access your account, you cannot bypass it on your own. You must contact your organization's IT administrator or Microsoft Support to reset your authentication methods.

Microsoft Office Security Issues