There are two ways to set up tokens for offline MFA: download tokens automatically or create tokens manually.

If you are using the SafeID Token Service (STS) to manage your tokens, then your Entra ID domain users will be able to download offline token automatically from STS.

Otherwise, your users will have to manually create tokens for offline MFA