having them delete the account on their device and then force the user to Require re-register multi factor authentication in the Entra admin center?
Yes, this is the simplest and probably the only method.
--please don't forget to close up the thread here by marking answer if the reply is helpful--