Trying to do as title suggests -- want to disable end users from using phone number for any recovery/authentication, etc.

I've tried

• disabling phone enrollment
• ensuring all authenticators do NOT use phone for recovery/authentication
• uncheck SMS/phone recovery for password policy

Any other ideas?

Note: this is for OIE

EDIT: I spoke with okta support engineer. At the time of this post, there is a bug where both recovery and authentication must be enabled first before the phone authenticator can be deleted.