When they login to the device, it's not prompting them for MFA and then as a result, it does not sync/check-in to Intune, which means that it's not grabbing the various configuration policies - OneDrive KFM and others, but more importantly, a necessary application that is user-based which it should install when they login. Now that I'm testing with actual users, the users are setup for MFA because it's required for other software that we SSO. In testing, everything with Intune goes great - but I am a dingbat and my test accounts did not have MFA turned on. Basically, I am setting up the device in a sort of white-glove/pre-provisioned fashion through autopilot and then handing them off to users to login to. I work for a public agency and the devices are setup through autopilot in self-deployment mode because they are shared devices (field use) and this mode seemed to work the best and better than white glove. Relatively new to Intune, testing for the last 3 months or so, and sending my first devices out in the field with my test group.

Intune mfa