I’m working in a very small school environment. They’re on M365 A3 licenses and using Entra along with InTune for mdm.
We have (at least in theory) disabled all MFA so that all users (specifically for the students) can just sign in without needing to use Authenticator.
The issue is some students are being prompted to download the Authenticator pp when we do “work / school” sign in. The prompt we’re getting says that our organization requires it.
I’ve disabled MFA in Entra. What could I be missing?
In the Microsoft Entra admin center navigate to:
Protection>Authentication methods>Registration campaign and set it from Enabled or Microsoft managed to Disabled.