Disable on-demand authentication (ODA) for a user when you no longer want to allow the user to request on-demand tokencodes. You can do this, for example, when users who needed temporary access no longer need it.
In the Security Console, go to the Home page.
Use Quick Search to find the user.
Select the user for whom ODA must be disabled.
Under On-Demand Authentication (ODA), click Manage.
For Enable User, deselect Enable user for on-demand authentication.