Hacker News Reader

When I uncheck Authentication phone I get a red error message: "Configure at least one phone so that if you lose the app you are not locked out of the account."

If You are able to remove it, I’m wondering if there is some sort of policy or limitation our VAR is adding to our instance.

edit - added quotes to the error message

View on HN

Yes, same thing happens to me. I’m the first account (and the only current admin) that purchased all the licenses so I wonder if that’s why. Is your account an admin or do you have any additional privileges? It makes sense that they need at least one phone number on file but there should be a way to opt out of SMS 2FA.

There are 2 other admins in our domain. We all get the same error. Through the Azure console I can disable MFA for other accounts, so even if I lost my app, one of the other 2 admins could just disable MFA until I re-enable it on another device.

Reply on news.ycombinator.com