By default, multi-factor authentication (MFA) is turned. In some situations, you may need to disable and re-enable MFA for whole organization or a user. This video shows how to do so.
1. Sign into the Microsoft 365 admin center with global admin credentials. Click on Admin.
2. In the left pan choose Show All and under Admin centers, choose Azure Active Directory.
3. In the Azure Active Directory admin center choose Azure Active Directory.
Alternatively, you can login Azure portal.
4. To disable or enable Security default for whole organization, go to Properties>Manage Security default.
Click Yes for Enable Security default or No for Disable Security default.
5. To disable or enable one or some users, login Office 365. Go to Users>Active users.
* Click on Multi-factor authentication
* Enter the username and press Enter.
* You may have these options: Disable, Enforce and Manage user settings. Click on Manage user settings, and then check Require selected users to provide contact methods again. Click on Save.
* Updates successful. Now, when the user login Office 365, he/she will be prompted to
Note 1.The settings may take a while to active.
2.Make sure the account is MFA enabled.. If it is disabled, you need to enable it first
Please view this step by step video: