Is there a way to force users to use two factor authentication?

[dan]

Is there a way to force users to use two factor authentication for an application or a tenant? Not to just enable them to use it, but to force it?

[dan]

Not with a FusionAuth policy, but you could enforce it just by checking the user during login, as twoFactorEnabled is an attribute of the user.

There's also this github issue which you may want to vote up: https://github.com/FusionAuth/fusionauth-issues/issues/763