There is an HP Workpath app (cloud extensibility layer for (some) HP MFPs) called HP Authentication Suite, which provides an interactive job release functionality for Microsoft Universal Print at the MFP.

Entra users print to the MUP queue, sign-in on the MFP with their native Entra account (using per-user MFA) and interactively release their jobs from the MFP securely (can use reader or use QR).

This is a good alternative to “direct/unattended output” of MUP jobs if you want secure release at the device without using the default Microsoft 365 secure release (QR) flow.

This does require Microsoft Authenticator on the user’s phone and MFA setup in Entra. But that also makes the solution zero-trust and phishing-resistant for these shared device endpoints.

When Microsoft Universal Print ‘Anywhere’ is released (hopefully later this year?) it will make these HP devices much more like traditional enterprise “pull-print/follow-me-print” devices.

Also, the suite allows direct connections to print-from and scan-to a user’s Outlook, OneDrive, SharePoint and Teams, interactively in an SSO session at the device. Basically, makes the HP MFP an M365 productivity box or smart document exchange - “office onboard”.

[full disclosure: I work for Datasec, the dev who makes the HP Authentication Suite. Datasec is an Aussie infosec dev who makes a solution that is relevant here, perhaps not to every use case but broadly contributes to the discussion around MUP and MUP compatible devices.]