2 ms·
And also that they must offer users the possibility of disabling SMS-based authentication if another scheme is enabled. On Microsoft 365, if you setup "forced
by rekoil 4y ago
And also that they must offer users the possibility of disabling SMS-based authentication if another scheme is enabled.
On Microsoft 365, if you setup "forced MFA" on your organisation, then they additionally force users to add a phone number which can be used for account recovery.
I get why Microsoft wants to keep account recovery possible in this manner, but I am not someone who needs it, and there needs to be a way for me to make my account more secure where my phone company can't take over my account...
- zenexer 4y agoYou can actually stop the MFA onboarding process when it asks for your phone number—just close the tab or window. You’ll still get TOTP or whatever else you already configured. It makes it sound as though you also need to add a phone number, but you don’t.