logo
search
MFA Security Issues

How to Disable the Microsoft Authenticator Registration Campaign

Huma Ashraf ChHuma Ashraf Ch Oct 10, 2026 868 views

Question details

Users are continually prompted to install Microsoft Authenticator after entering an MFA code to access Outlook and Teams, with no option to skip the enrollment.

How to Disable the Microsoft Authenticator Registration Campaign for MFA
Product
Microsoft 365
Device & OS
not provided
Scenario
Accessing Microsoft 365 applications like Outlook and Teams while encountering a mandatory, unskippable Microsoft Authenticator setup prompt.
Observed behavior
The authentication system enforces Microsoft Authenticator enrollment by removing the 'Skip for now' option during the MFA login process, blocking access until the app is installed.
Before you start

Please note that modifying MFA registration campaigns requires administrative privileges. Regular users experiencing this issue must contact their organization's IT administrator to apply these changes.

Solution 1Recommended

Disable the Registration Campaign via Microsoft Entra Admin Center

Use this method if you are an IT administrator looking to turn off the organization-wide Microsoft Authenticator prompts.

Microsoft occasionally runs registration campaigns to encourage users to set up the Authenticator app. Administrators can modify this behavior directly within the Microsoft Entra admin center.

1
Sign in to Microsoft Entra admin center

Log in to the Microsoft Entra admin center as an Authentication Policy Administrator or a Global Administrator.

2
Navigate to Authentication methods

On the left sidebar, go to Protection, then select Authentication methods, and click on Registration campaign.

3
Edit campaign settings

Review the current campaign scope, management mode, and status. Click on Edit to modify these settings.

4
Disable or exclude users

Change the State to Disabled for the entire organization, or alternatively, keep it enabled but add specific users or groups to the 'Excluded' list.

5
Save changes

Click Save at the bottom of the page to apply the new configuration. Users will no longer be forced to install the app on their next login.

Disable the Registration Campaign via Microsoft Entra Admin Center
Policy Application Delay: It may take a short amount of time for the updated authentication policy to propagate across all Microsoft 365 services.
Free Microsoft Office alternative

Experience Hassle-Free Productivity with WPS Office

While dealing with complex cloud authentication and mandatory MFA policies in Microsoft 365, you might prefer a straightforward desktop office suite. WPS Office provides a lightweight, free alternative that allows you to manage local documents effortlessly without constant security prompts.

  1. 1. Download the installer: Visit the official WPS Office website and click the Free Download button.
  2. 2. Install WPS Office: Run the downloaded installer and follow the simple on-screen instructions.
  3. 3. Start working seamlessly: Open WPS Office and immediately start editing your existing Microsoft Office documents.
Completely free and lightweight office suiteFully compatible with Microsoft Word, Excel, and PowerPoint formatsWork offline without mandatory cloud MFA promptsFamiliar user interface for seamless and quick migration
QA img-9

Frequently Asked Questions

Why did the 'Skip for now' option disappear from my MFA prompt?

The 'Skip for now' option disappears when your organization's IT administrator enforces a strict Microsoft Authenticator registration campaign, or when the 14-day grace period for setting up MFA has expired.

Can I bypass the Authenticator registration as a regular user?

No. If the prompt is enforced by an organizational policy, regular users cannot bypass it. You must contact your IT administrator to have your account excluded from the campaign or to adjust your authentication methods.

Does disabling the registration campaign completely turn off MFA?

No, disabling the registration campaign only stops the aggressive prompts forcing users to switch to the Microsoft Authenticator app. Users will still need to use their existing MFA methods, such as SMS or hardware tokens, depending on your organization's security settings.