Mattm Excellent news on finding the source of the problem. If it's a conditional access policy, you don't need to turn it off - you can just set an exclusion for the user account that osTicket is using (and any other accounts affected by this). Our MFA conditional access policy is shown below as an example:
This way the rest of your tenant can remain protected by any policies you set.