Disable MFA using Microsoft Entra ID Premium

About this task

Use this task to disable multi-factor authentication (MFA) with Microsoft Entra ID Premium.

If you do not have Microsoft Entra ID Premium, see Disable MFA without Entra ID Premium.

Log into Microsoft Entra ID.
Go to Manage > Properties and configure the settings.
1. Select Manage Security defaults.
2. Disable the toggle Enable Security defaults and select Save.
Go to Manage > Security > Conditional Access.
Select New Policy and configure the settings.
1. In the Name field, enter 2FA policy.
2. Under Users and groups, select All Users.
3. Under Cloud apps or actions, in the Exclude section and select the Universal ZTNA app you created earlier in Select excluded cloud apps.
4. Under Grant, select Grant access.
5. Select the Require multi-factor authentication check box and any other settings your organization requires.
6. At the bottom, ensure Enable policy is set to On and select Save.