Microsoft admin isn’t my day job, but I dealt with this exact thing the other day—the toggles for Microsoft Defender MFA are spread across Entra ID policies, Registration Campaigns, per-user settings, and more Microsoft subdomains I’d never heard of. After two hours the best I could do was add a Skip button to the MFA prompt when our users sign in.