'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Turn Off Microsoft Entra Identity Verification Requirement
Question details
The user wants to remove the prompt requiring them to set up identity verification methods when logging into Microsoft Entra.
- Product
- Microsoft Entra ID
- Device & OS
- not provided
- Scenario
- Administrators or users are being forced to configure multi-factor authentication (MFA) and cannot access their accounts until identity verification methods are registered.
- Observed behavior
- The system persistently prompts for identity verification setup upon sign-in. This block remains active even after basic security defaults have been disabled in the tenant.
Ensure you are signed in with Global Administrator or Conditional Access Administrator privileges. Note that disabling identity verification and multi-factor authentication (MFA) significantly reduces your organization's security posture and leaves administrator accounts vulnerable.
Review and Disable Conditional Access Policies
Conditional Access policies are the most common cause of forced MFA and identity verification prompts in enterprise environments.
If your tenant has Microsoft Entra ID P1 or P2 licenses, Conditional Access is likely enforcing the verification requirement. Disabling or modifying these policies will remove the prompt.
Log into the Microsoft Entra admin center using an account with Conditional Access Administrator permissions.
On the left sidebar, expand the 'Protection' menu and select 'Conditional Access', then click on 'Policies'.
Review the list of active policies. Look for policies that require multi-factor authentication or authentication strength under the 'Grant' controls.
Select the policy causing the prompt. You can either exclude specific users by going to the 'Users' section and adding them to the 'Exclude' tab, or disable the entire policy by setting the 'Enable policy' toggle at the bottom to 'Off'.
Click 'Save' to apply the changes. Users may need to sign out and sign back in for the new policy to take effect.
Check Per-User Multi-Factor Authentication Settings
If Conditional Access is not used, legacy per-user MFA settings might be enforcing the verification requirement.
Verify Microsoft Entra Identity Protection Policies
Identity Protection features can automatically force users to register for MFA regardless of other settings.
Need a Hassle-Free Office Suite? Try WPS Office
Managing complex Microsoft Entra ID policies, Conditional Access, and administrative overhead can be frustrating. If you just want a reliable, easy-to-use office suite to get your work done without the enterprise IT hurdles, WPS Office is the perfect alternative.
- 1. Visit the Official Website: Go to the WPS Office website to access the free download.
- 2. Download the Installer: Click on the 'Download' button to get the lightweight installation package for your operating system.
- 3. Install and Start Working: Run the setup file and open WPS Writer, Spreadsheet, or Presentation to easily edit your documents without complex sign-in barriers.
Frequently Asked Questions
Why does turning off security defaults not stop the identity verification prompt?
Security defaults are just one of several ways Microsoft enforces multi-factor authentication. If you have active Conditional Access policies, legacy per-user MFA, or Identity Protection registration policies enabled, users will still be prompted to set up verification methods even if security defaults are disabled.
How do I exclude a single administrator from a Conditional Access policy?
Open the specific Conditional Access policy in the Microsoft Entra admin center. Under the 'Users' assignment, click on the 'Exclude' tab, check 'Users and groups', search for the administrator's account, select it, and then save the policy.
Is it safe to turn off the Microsoft Entra identity verification requirement?
Disabling identity verification (MFA) is highly discouraged, particularly for Global Administrator accounts. Doing so removes a critical layer of defense and significantly increases the risk of unauthorized access, account compromise, and data breaches.
What is the difference between per-user MFA and Conditional Access?
Per-user MFA is a legacy setting that statically turns MFA on or off for specific accounts. Conditional Access is a modern, dynamic rules engine that requires MFA based on context—such as user location, device compliance, or sign-in risk level—providing better security with less user friction.
