The Account Owner or Account Admins can mandate 2FA for all of their account's users via Account Admin > Manage Users simply by toggling the Mandate 2FA for all account users button.

The Account Owner / Account Admin must have activated 2FA for their account beforehand

Once '2FA for all account users' is activated, any user who does not already have 2FA activated for their account will be forced to activate 2FA for their account (via email or an authenticator app) the next time they log in to Genovo.