- Click Users -> Active Users
- Click the Button Multi-Factor Authentication
- New window will open
- find user, highlight and click the enable button
once the User logs in and registers their phone with Microsoft Authenticator it will change from Enabled to Enforced.