Self-service passwordless setup & enforcement

I was wondering if there is a way to allow tenant users, on their own, to set up Passwordless using MS Authenticator AND set the account in a way that it's always enforce Passwordless or password+MFA...