My account already has Microsoft Authenticator set up as the default sign-in method, but I keep getting prompted to add a phone number. How can we stop requiring phone methods across the tenant?
Why am I still being asked for a phone number when I have Microsoft Authenticator?
Asked by
n38+bradawl_590
Answers
Check the tenant's authentication methods policy for both SMS and voice calls. Having Authenticator set as the default doesn't necessarily mean phone methods are disabled.
If voice calls are enabled for a specific group, check whether the affected account is included in that group. That could be relevant even if SMS is already disabled.
Reply to this answer
First, check what the prompt actually says and when it appears. A request for a phone number isn't enough on its own to tell whether the issue is an MFA method setting or a different account requirement. That distinction should help narrow down what needs changing.
Reply to this answer
Add your answer
Answers are reviewed before publication.
n38+bradawl_590:
SMS is disabled, but voice calls are enabled for a specific group. I'll check whether this account is included.