To force users to register a two-factor authentication token, go to Settings → System Parameters → Security and check the checkbox. As per the photo:
