Hi @Tarald Johansen • Thank you for reaching out.
I suspect that you are required to provide 2 authentication methods because of SSPR. When you hit the Next button on the "More Information Required" page, it is checked that whether SSPR is enabled for the user account or not. If SSPR is enabled, the user will have to provide Authentication Method for both MFA and SSPR, refer to below flow chart:
To change the number of methods required for SSPR, navigate to Azure AD > Password Reset > Authentication Methods and make sure Mobile app notification/code is unchecked.
-----------------------------------------------------------------------------------------------------------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.