Problem with enrolling teams device

Question

Hi all we changed user sign-in recently to Passwordless, every time we change sign-in method or add MFA I have to re-enroll teams devices (Yealinks with Android OS) and they will keep working because they are excluded from conditional access this time I used TAP (temp access pass) to re-enroll them and device code but they keep signing out the user, when checking the Entra AD sign in log I see that conditional access not applied which make sense because I excluded them from any policy but they failure reason is that the TAP is expired, and this happens to some users but not the others, all users are enrolled the same way and they are using the same devices and they are in the same groups, what am I missing here?
FYI passwords were scrambled because we dont want users to use them anymore thanks