Microsoft Entra admin centre go to Home | Security | Multifactor authentication
Scroll down the page to the ‘Security defaults’ section then click on ‘Manage security defaults’ and change the setting there.