You have an Azure subscription. You enable multi-factor authentication for all users. Some users report that the email applications on their mobile device cannot connect to their Microsoft Exchange…

Enabling self-service password reset is a different security feature that allows users to reset their own passwords and does not resolve connectivity issues caused by MFA with legacy applications.

When multi-factor authentication (MFA) is enabled for a user, older email applications or clients that do not support modern authentication protocols often require an "app password" instead of the regular account password to connect to services like Exchange Online. App passwords are auto-generated, one-time use passwords created by the user to allow specific applications to bypass the interactive MFA prompt.

Resetting the Azure AD password would not resolve the issue, as the core problem is the application's inability to handle MFA, not an incorrect password.

Reinstalling the Microsoft Authenticator app is relevant for interactive MFA prompts but does not help applications that cannot present an interactive prompt to the user.