Reply to post:

My MFA is fine - just checked my logs and have had a dozen or so people since noon get auth'd on our Azure MFA, but I have as much on-prem as possible and only the actual 'contact the end user' bit in Azure.