Support "Trusted this device" for Managed Users when MFA is enforced, specially for organizations that don't use or don't want to enable this through an external IdP, but still want to reduce MFA friction on recognized devices.