Enable two factor authentication for users
Admin users can enable two-factor authentication for users by turning on the feature “Use 2FA (two-factor authentication)”.
Go to the “Login options” turn on “Use 2FA” - will actives Force web login as it is required.

First time the user, with 2FA enabled, sign in she is prompted to pair a device and login to dRofus with an additional one-time password as explained in Two Factor Authentication (2FA) using one time password
When 2FA is activated an administrator, can turn it off by selecting the same button.
If 2FA is turned off, force web login will remain on by default.