If it’s an elevated user, that would require MFA. If the elevated user is coming from IDP, MFA can be setup there.
For more details: Deprecation of Strong Authentication on Admin Step-Up
If it’s an elevated user, that would require MFA. If the elevated user is coming from IDP, MFA can be setup there.
For more details: Deprecation of Strong Authentication on Admin Step-Up