From Monday 15th of April, the users that log in as external employees will need to activate 2FA using any Authenticator mobile app. Next time you log in, it will redirect you to a page to set it up and change your password.