We have had a few rare occurrences like this. Here is what we've found that may help.
If the smartphone has Microsoft Authenticator notifications disabled, notifications must be enabled.
We require Microsoft Authenticator to use Number Matching. If the smartphone has automatic application updating disabled, the version of Microsoft Authenticator may not be current enough to support Number Matching.
If the smartphone is older and cannot run a new enough version of iOS or Android, then Microsoft Authenticator is unable to update.