Problem

Currently It's only possible to enforce 2SV enrollment for system administrators and administrators using the JVM runtime property "-Datlassian.authentication.2sv.enforcement.enabled=true"  

which leaves the rest of the user with the option to not enroll in MFA .

Suggested Solution

Adjust the enforcement flag to optionally pick the rest of the users or leave enforcement to high-risk authority users only   

Why This Is Important

• System administrators would be able to apply a global policy
• It's not possible to track who applied the optional enrollment on large organizations manually  

Workaround

NA