Learn how users must provide an MFA verification method each time they log in