Before an application can be created, a logon procedure must be created first. 

If you are implementing the device-based Outlook Anywhere  MFA, then

If you are implementing the agent-based Outlook Anywhere  MFA, then