'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Disable the Microsoft 365 Action Required MFA Prompt for One User
Question details
The user needs to stop the recurring "Action Required" multifactor authentication (MFA) prompt for a specific individual account within a Microsoft 365 environment.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Managing user authentication settings and security policies in a Microsoft 365 business tenant.
- Observed behavior
- Microsoft 365 repeatedly interrupts the login process with an "Action Required" screen, forcing the user to set up or verify multifactor authentication.
You must have Microsoft 365 Global Administrator or Authentication Administrator privileges to modify tenant-wide security defaults, Conditional Access policies, or per-user MFA settings.
Modify Microsoft 365 Authentication Policies via the Admin Center
Use the Microsoft Entra admin center (formerly Azure AD) or the Microsoft 365 admin center to adjust the policies enforcing the MFA prompt for the specific user.
In a business environment, multifactor authentication (MFA) and the "Action Required" registration prompts are controlled by tenant-wide authentication policies. Disabling this prompt for a single user requires adjusting the specific policy governing their account.
Please note that creating a per-user exception for MFA reduces account security and is generally advised against by Microsoft security guidelines.
Log in to the Microsoft Entra admin center as an administrator. Navigate to 'Identity' > 'Overview' > 'Properties' and check if 'Security defaults' are enabled. If enabled, MFA is required for everyone, and per-user exceptions are not possible without disabling security defaults entirely.
If your organization uses Conditional Access instead of Security Defaults, go to 'Protection' > 'Conditional Access'. Locate the policy enforcing MFA, edit it, and add the specific user to the 'Exclude' list under the 'Users' assignment.
If you are using legacy per-user MFA, log in to the Microsoft 365 Admin Center. Go to 'Users' > 'Active users', click 'Multi-factor authentication' at the top, select the specific user, and change their MFA status to 'Disabled'.
Tired of Constant Microsoft 365 Login and MFA Prompts? Try WPS Office
If managing complex Microsoft 365 tenant policies, security defaults, and constant "Action Required" MFA prompts is disrupting your workflow, consider switching to WPS Office. It provides a powerful, hassle-free environment for local document editing without forcing continuous online authentication.
Frequently Asked Questions
Why does Microsoft 365 keep saying "Action Required" at login?
This prompt appears because your organization has enabled Security Defaults, Conditional Access policies, or a registration campaign that requires you to register the Microsoft Authenticator app or another multi-factor authentication (MFA) method for account security.
Can a standard user disable the MFA action required prompt themselves?
No, standard end-users cannot bypass or disable organizational security policies. Only a Microsoft 365 IT administrator can change these tenant-wide or per-user authentication requirements.
Does disabling MFA for one user affect the rest of the company?
If configured via Conditional Access or legacy per-user MFA, you can exclude a single user without affecting others. However, if your tenant uses "Security defaults," you cannot create exceptions; you would have to disable it for the entire organization, which exposes all users to higher security risks.
