Role Enforcement for Two Factor makes two-factor authentication mandatory for the user roles you choose. It’s an add-on for the Two Factor plugin, which provides the two-factor methods.

When a user in a selected role hasn’t set up any two-factor method:

After logging in, they’re sent to their profile instead of the page they asked for.
Any other dashboard page sends them back to their profile, where a notice and a dialog explain what to do.
Once they set up at least one method, the dashboard works as usual.

Users in other roles aren’t affected, and nothing is enforced until you select at least one role.

Enforcement applies to the dashboard only. It doesn’t restrict the front end of the site.

The plugin makes no external requests and collects no data.