Multi-factor authentication is required for every user across the identity provider and all production systems.