MS Authenticator woes

[Michael]

Hi all,

 

I have an O365 tenancy and have turned off 2FA to resolve problems users were experiencing.

 

Signing in as an end user (no roles), navigating to their initials > View account > Update Info (under Security info) and I'm asked to use the MS Authenticator even after an hour.

 

Manage security defaults are turned off, as are per-user MFA with no conditional access rules set.

 

Why is this happening and how do I resolve it?

[Michael]

I think I've got to the bottom of this -

 

On the per-user MFA page, highlight the user, select Manage user settings > Require selected users to provide contact methods again