Change MFA Device

[AgungTP]

Hi All,

I need to replace my old device configured with microsoft authenticator for Meraki dashboard's MFA, but here I couldn't find the menu where to change it, some else had the same experience in the past?

[Ryan_Miles · Accepted solution]

Disable it and then reenable it and it will give you a new QR code to scan into your app

[Dartanian14]

How? There's no option for me to do it individually. It's required for the organization, there's no option to reset a single person -- is this a joke? Like nobody has ever got a new phone before?

[Dartanian14]

So I have to contact licensing to get it removed, that's the dumbest thing I have ever seen. There is 0 reason for that sort of gatekeeping unless you absolutely want to opt into it, ffs... 

[Ryan_Miles]

Are you able to login now? I'm thinking yes based on your screenshot. When logged in go to your email in the upper right, click My profile, and on that page you should be able to disable 2FA, save, then re-enable 2FA to get a new QR code.

Just noticed you said it's enabled at your Org level. It does seem to then remove the off function as I noted at the user level. My thought would be disable it Org wide, then disable your own 2FA, set it back up, then enable at Org level again.

Or maybe run it by Support to see if there's another way I'm unaware of. 

[Jm1911]

I got the solution for this for those who run into it. If you have your one time codes that are listed under your profile then you can use that to log in to the dashboard.  If you are logged in, you can disable 2FA via "My Profile" by following the steps linked below: https://documentation.meraki.com/General_Administration/Other_Topics/Two-Factor_Authentication#Disab... Please note that in order to do this, a full organization administrator must first disable the organization-wide setting "Force users to set up and use two-factor authentication". To disable this, navigate to Organization > Configure > Settings > Security > Two-factor authentication > Uncheck the box After disabling the organization setting and disabling 2FA on your profile, it can be set back up using new configurations, and the organization setting can be re-enabled. Once you disable 2FA, you can reenable and a qr code will appear.  Disabling the organization-wide "Two-factor authentication" setting will not disable or change MFA/2FA for any users. This feature forces new users to set up two-factor authentication, and if it has been set up, those users will still need to use 2FA to login. After disabling this setting and disabling your account's 2FA from "My Profile", the setting can be re-enabled.