Having trouble allowing users to create app passwords

We have a couple users who need to use SMTP authentication for a couple LOB applications that don't support OAuth. However, we've got security defaults set, so all users have MFA using Microsoft Auth...