Summary

Currently enabling MFA/2FA from the organization page will enable it for all domains that are verified under the organization. If user only want certain domains or users to have 2FA, this is currently not possible. Adoption of MFA/2FA is quite difficult due to the absence of fine-grained configuration.

While it is possible to exempt per uses basis after the MFA activation, it is still not very feasible to exempt it one user at a time if there are a lot of users that needs to be exempted. There is also no way to track from JIRA which users are exempted as well so organization admins will have to keep an external record on which user is exempted.