It would be great to be able to force 2FA on individual (or all users).
We have an existing feature request to enforce 2fa as a platform level, this would cover customers and organisation users (support, sysadmin etc)