Allow and enforce multi-factor authentication or FIDO2 for admins

As an information security officer onboarding Featurebase for our organization, we have certain compliance requirements. Our organization needs at least multi-factor authentication for administrators as a best practice. Methods can be a time based one-time-password. Currently we can only log in with username and password or integrate with SSO. Ideally authentication also supports modern non-phishable standards such as passkeys and hardware security keys.

There should not only be the option for users to enable MFA, but also for administrators to enforce MFA. As we connect internal tools containing sensitive information, this is a risk for us. We believe MFA is something every modern tool should support as a basic feature.

Thanks!