In order to improve the level of security for MFA, we would like to have a number matching function not only based on OTP or the approve function in the HelloID authenticator. Dependent of the function of an employee we would like to rule out the Approve option.

Refer to Microsoft's MFA options on this: https://learn.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-number-match