To enable 2FA disabled for all users, go to:
Settings → System Parameters → Security, in Multi-factor authentication, check the “Force multi-factor authentication for all users” flag.