Force 2-factor authentication (2FA) for all users to comply with GDPR

I agree. We have a large client who is requiring 2FA for all users (agency and internal) and we need to be able to force this function without chasing down 30-40 users distributed around the nation.