Hi,
Thank you for posting in Microsoft Q&A forum.
Per the document, a second device is required to complete the MFA for iOS devices enrolled via Apple automated device enrollment. Because the primary device can't receive calls or text messages during the provisioning process. Refer to:
Require multifactor authentication for Intune device enrollments
Thanks for your time. Have a nice day!
Best regards,
Simon
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.