Processes in Microsoft 365 for setting up Office apps, redeeming product keys, and activating licenses.
You must implement it separately from AAD policies, as that would only work with AAD logins (O365, Portal, etc.). Here is a link to MFA Server to use on-premises - https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-dir-ad.