Under Configure > Authentication > One-Time Password > Settings you cannot disable the OTP for the user portal, upon the application of the setting change you get an error "OTP settings were not updated".
Individually enabling or disabling the other settings works fine.