Hi @VickVega , so sorry for the delay in response. We were waiting for a response from the product team. Here is what I have received from our MFA SME:
"The user portal requires some type of primary authentication. This can be to AD (which if the server is not joined then it would be the local users on the server), LDAP server, or Radius server. We need some way to authenticate the user to verify they are who they say they are to setup MFA. In addition without password it would not be MFA as the password (something you know) is the first factor.
It's possible you could use the WebServicesSDK for this, but the phone activation is the big issue there as it takes them coding the QR creation and all of that from the data provided and would definitely need developers to do so and it’s unlikely they would be able to implement this and only the PG would be able to help them get this implemented."
I'm sorry that there isn't a simpler answer for this. Unfortunately the best approach seems to be changing your initial setup. I can answer any questions you have though.
If this answer helped you, please mark it as "Verified" so other users may reference it.
Thank you,
James