When MFA is enabled, you can either vote for using the MS Authenticator App or SMS. You can also skip the second step on devices you trust, such as your own computer. For me, i can in most cases log in using UN / PW, although after a certain time span or log off, i will have to use the MS Authenticator App for MFA to log in again.
So i would suggest that in cases you will visit customers with a strict security policy, log in using MFA before the visit as that should leave you on a trusted device for some time. Of course this is not an option if you have to use customers devices for accessing Check Point resources such as licenses, SK articles and software...
CCSE / CCTE / CCME / CCSM Elite / SMB Specialist