MFA Support During Device Enrollment

The following table summarizes which MFA methods (Email, Authenticator App, and Passkey) are supported during device enrollment across different platforms and enrollment types.

Enrollment Type	Email / Authenticator	Passkey
Android Devices
EMM Fully Managed	✔	✖
EMM COPE	✔	✖
AMA Fully Managed	✔	✔
AMA COPE	✔	✔
Silent Enrollment	NA	NA
Apple Devices
MDM	✔	✔
iOS DEP	✔	✖
macOS DEP	✔	✖
macOS MDM	✔	✔
macOS-Agent (Registered Device)	NA	NA
Windows
Auto-pilot	NA	NA
MDM	✔	✖
Agent (Registered Device)	NA	NA