Change the recommended account type from "Other" to "Work or School" account in certain circumstances when installing the Authenticator app
When the Global Administrator chooses to combine MFA and SSPR setup and not allow the authenticator app choice of 'approve or deny', but only allows authentication by 'code', the user's choice of three accounts: Personal, Work or School, and other -- the web page suggests the user setup their account as 'other'.
In other words, on the "Keep you account secure" page (as you're setting up the authenticator app in this scenario) asks the user to select "other" instead of "Work or School". It seems that removing the choice of "approve / deny" for the tenant for security reasons, shouldn't cause "other" to show up as the recommended choice. We believe it is too easy for a busy user to dismiss a phone popup of approve/deny with an approval which potentially could complete the compromise of a user's account.