Bug in azure?, askes multifactor even that multifactor disabled

2
votes

In azure under Azure Active Directory-->users-->Multi Factor Authentication I disabeled the multifactor auth, but when I try to access from browser I'm still getting message to open the page via some message to my mobile phone.

Here is screenshot from azure settings:

enter image description here

Here is the error when I try to access from api:

{"error":"interaction_required","error_description":"AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '00000003-0000-0000-c000-000000000000'.\r\nTrace ID: b59ca6c5-b9bc-4c68-a9a2-1e3ba6d2d300\r\nCorrelation ID: 14e59b18-d5ba-4a35-9623-5fad5e2351ec\r\nTimestamp: 2020-02-13 06:21:47Z","error_codes":[50076],"timestamp":"2020-02-13 06:21:47Z","trace_id":"b59ca6c5-b9bc-4c68-a9a2-1e3ba6d2d300","correlation_id":"14e59b18-d5ba-4a35-9623-5fad5e2351ec","error_uri":"https://login.microsoftonline.com/error?code=50076","suberror":"basic_action"}

here a screenshot Azure Active Directory-->Security-->Conditional Access

enter image description here

2
azuremulti-factor-authentication

2 Answers

1
votes

To disable multi-factor authentication:

  1. Go to Azure Active Directory Properties page.
  2. On the bottom of the page, choose Manage Security defaults, and in the Enable Security defaults pane, set Enable Security defaults toggle to No.

source

enter image description here

0
votes

This can happen if you are a global administrator, for example. They can be still required to undergo MFA.