A web application is a browser based application. Commonly, the login UI of a web application is form-based. That's why it is often called Form Based Authentication (FBA).
To secure a web application running on an IIS server with MFA, the web application's login UI must be formed based.
Outlook Web Access (OWA) is a typical web application. Please refer to OWA MFA as an example.