That must be something extremely and unnecessarily custom. At my org we enforce MFA with Microsoft Authenticator and that works just fine with macOS' built-in Exchange support.