If you want to enroll for Azure MFA the users need to go through these steps. When you enforce or enable MFA the user will be prompted for MFA enrollment. This is best done in a browser.
First the user need to access any of our endpoint e.g. http://portal.office.com
Here are all of the pictures in a Sway: