To disable or re-enable MFA for your organisation's users, Zoho recommends using Zoho Directory, which lets you manage users across multiple Zoho apps from one place. If you have enforced MFA from another app instead, such as Zoho One, Zoho Mail, Zoho Cliq, or Zoho Vault, you can also disable or re-enable it from within that app directly.

Prerequisites

• Administrative privileges in your organisation.
• A Zoho Directory account (free to sign up for).
• The relevant app added to Zoho Directory: go to Admin Panel, then Apps, then Add Application, search for the app, click Add, then select the existing account and confirm.

Two Different Scenarios

How you disable MFA depends on how the user came to have it in the first place, and this distinction matters because the two paths behave quite differently.

Users Who Configured MFA Themselves

1. Go to Zoho Directory, then Admin Panel.
2. Click Users in the left menu and select the checkbox next to the user.
3. Click Disable MFA at the top.
4. Enter your password and click Disable.

Users Who Are Enforced to Use MFA

1. Go to Zoho Directory, then Admin Panel.
2. Click Users in the left menu and click on the user.
3. Go to the Security Policies tab and use the toggle to disable or re-enable MFA.

Unlike the self-configured case, this toggle works in both directions, since MFA here is governed by a policy you control rather than a personal setting the user made themselves.

If MFA Is Enforced from a Different App

If your organisation enforces MFA through Zoho One, Zoho Mail, Zoho Cliq, or Zoho Vault rather than Zoho Directory, disable or re-enable it from within that specific app's own admin settings instead, since Zoho Directory won't override a policy set at that level.