Your company has an Azure Active Directory (AD) tenant.
You need to ensure that users receive a verification text message on their phones before they can log in to Azure.
What should you do?
You should enable MFA. This allows you to configure settings so that users receive text messages, phone calls, or app notifications for verification during sign-in attempts.
You should not install AD FS. AD FS is a single sign-on solution. It does not ensure that users receive text messages before logging on to Azure AD.
You should not enable SSPR. SSPR allows users to reset their passwords without IT involvement.
You should not install Microsoft Authenticator on an Azure VM. Microsoft Authenticator is an app that runs on mobile devices to provide MFA.