Up until now the MFA feature was able to be enabled by users and managed by users. Now a practice can choose to prohibit user management by enabling the Global Setting 'Prohibit user management'. When this preference is enabled the user will no longer be able to toggle the 'Enable MFA' setting on the User Details page. Management of the setting will be done in User Admin. Additionally, a practice can also require MFA for every login instead of allowing users to remember a computer for 30 days.