Disable on-demand authentication (ODA) for a user when you no longer want to allow the user to request on-demand tokencodes. You can do this, for example, when users who needed temporary access no longer need it.
In the Security Console, click Authentication > On-Demand Authentication > Manage Enabled Users.
Use the search fields to find the user for whom you want to disable ODA. Some fields are case sensitive.
Click on the user that you want to disable for ODA, and click Disable for ODA.