put https://{server}/api/v2.1/admin/users//two-factor-auth/
As the system administrator, you can force each user to use 2-factor authentication (2FA).
When the value of force_2fa is 1 in this request, the user will be requested to activate 2FA by scanning a QR code next time they log in. To cancel enforcing them to use 2FA, change the value to 0 and send this request again.
This request is to be distinguished from the next request, because cancelling the enforcement doesn't necesssarily Disable 2FA for A User in System, which serves a different purpose.