10/01/2026
MFA "enabled" and MFA "enforced" are not the same thing.
Enabled means the feature exists, and some users have set it up. Enforced means every user, every sign-in, no exceptions.
The gap usually hides in three places: users who never registered, accounts exempted "just for now," and older login methods that skip MFA altogether.
Here's the difference in under a minute.
Want to know more?
Go to www.delvetek.com