As an IT administrator, I must be able to enforce 2 factor authentification for all users (including externals). This is an IT security topic.

Currently, I cannot control whether external organizations in my projects have setup their IMS correctly or not.