some notes about multi-factor authentication (MFA) for Office 365, Azure

Through the Office 365 admin center multi-factor authentication can be enabled/disabled by an administrator on a Per user basis

Phone Call is 100% out of band , MFA

.
App password Is an alternative to Multi-factor Authentication for Office 365 for older rich client applications