If you are a larger organization or a school, simply asking your users to enter a pin and start authenticating with a phone might be challenging. Even more so when they have never done that before.
Here is how you disable PIN challenge and phone verification when joining Azure AD
UPDATE: In Azure.
- Go to Active Directory
- Select your Domain
- Select Applications
- Select Microsoft Intune
- Select Configure
- Under manage devices for these users, select All and click Save.
- Go to: Admin > Mobile Device Management > Windows > Passport for Work.
- Select: Deactivate Passport for Work on registered devices