title: Disable login by name+password on Azure/Microsoft account + only allow login via security token
body: <p>I'd like to use 2FA on my account in the "classical" way. The current setup on Microsoft/Azure accounts looks like a security hole to me.</p>
  
  <p>I signed up to Azure and needed a Microsoft account for that (the one used at login.live.com / account.live.com) When setting up 2FA I can choose between security key, app etc. I setup a security key and it works in general BUT I am still able to login with just the account name and password. I can also choose to use only the key for login. This is not how 2FA is supposed to work.</p>
  
  <p>How can I either use name+password and then the hardware token (this it how it works for aws or google accounts) or just use the token without the possibility to downgrade the security to name+password. </p>