This should stop 2 factor from being forced, but it's not reccomended. Avoid this if you can.
Disable security defaults (Not reccomended, but seems to be the solution if you don't want 2 factor to be forced):
- Login to Entra as an admin user: https://entra.microsoft.com/
- Open the "Identity" dropdown in the left sidebar.
- Go to "Overview" under "Identity" in the left sidebar.
- Click the "Properties" tab towards the top.
- Click the "Manage security defaults" text link towards the bottom.
- Set the "Security defaults" dropdown to "Disabled (not recommended)".
Then, it appears this doesn't remove 2 factor for users that already have it setup. It might make sense to consider trying this first. I didn't test, so not sure what it'd do if you didn't disable the above first.
Remove 2 factor for a user who is stuck and unable to get past the 2 factor screen:
- Login to Azure as an admin user: https://portal.azure.com/
- Go to "Users" under Azure Services on the main screen. Searching at the top for "Users" can also get you there.
- Click the user that's having a problem with 2 factor.
- In the far left sidebar, click authentication methods.
- Delete all authentication methods for that user.
The user should now be able to login to the account without 2 factor.