MFA Options for Employees without Phones

Hello everbody,

we're currently trying to implement MFA in our company, but approximately 1/10 of our employees have a workphone and are not allowed to use their personal phone.

Since we also recently introduced Intune, the idea was to just use Windows Hello for Business, but when trying to provision it, we realized that you need to have MFA active for an account to be able to even activate it? Which kinda defeats the purpose.

So my question is, is there some way to circumvent the MFA requirement for WHfB? Or what other options do we realistically have?

Thanks in Advance!