If two-factor authentication is enabled, and an AD user gets locked out of their account or needs to enable a new device, an admin can reset their two-factor authentication. To reset a user's two-factor authentication, follow the steps below.
Once two-factor authentication is enabled for your AD user, you can disable it at any time by following the steps below.
1. You will need to log into Web Administration in order to do this.
2. Once you have logged into the Web Admin tool go to the AD Users Page, from there you will see "User Custom Settings"
3. Select the user from the drop-down menu and press "Disable 2FA"
Two-factor authentication will now be disabled for the user.
The user will need to set up two-factor authentication for their account the next time they log in.