Users can set up 2FA on their account

2FA using OAuth2
or there might be some way to do it through Microsoft identity management

maybe Microsoft uses OAuth2