The available methods depend on:
- The methods available through the interface of the RADIUS client (the appliance/device/server being signed in to). If this interface does not offer to insert a text value, then you can't use the SMS-based one-time password or the hardware token-based one-time password verification method.
- The verification options available in the legacy PhoneFactor portal experience. When a method is disabled there, than it won't be available for any multi-factor authentication prompt, including through NPS.
- Security Defaults. When this Azure AD feature is enabled, than the Authenticator App notification is the only method available for multi-factor authentication.