Your account must be associated with an activated Azure Authenticator mobile app on a device or associated with an OATH token ...

Your account must be associated with an activated Azure Authenticator mobile app on a device or associated with an OATH token before you can change your method to OATH Token.  Contact the help desk for assistance with activating the Azure Authenticator mobile app on your device or getting an OATH token assigned.