In the Device-Based Outlook Anywhere MFA login process, the first factor is the user's AD password, and the second factor is the device's hardware ID.
If you're implementing the Device-Based Outlook Anywhere MFA, then please refer to the wiki below for the instruction on how to set up the DeviceID for Outlook Anywhere.