Office365 Users are Asked for Phone Number after Launching any Office App

Office users are prompted to set up a phone number and email address after launching any Office app from the Okta Dashboard. Users are being prompted for the phone number/email address even if the steps from Using Okta MFA for Azure Active Directory for Automatically Federated Domains are performed successfully.

End User Perspective:

After launching any Office 365 app from the Okta Dashboard, the user is prompted with the following:

• The user is asked to provide more info, as presented in the following image

• After hitting Next, they are prompted to enter a phone number, even though users are not required to perform MFA in Office 365 (as per the policies). The prompt should be similar to this:

• Office365
• Single Sign On

The main cause is the Self Service Password Reset option being enabled for the Federated users. 

To turn off the Self Service Password Reset, please proceed with the following: 

1. Sign in to the Azure portal and navigate to Azure Active Directory.
2. Navigate to Protection > Password reset > Properties.
3. Under Self service password reset enabled, please select None.
4. Hit Save.