...
Once suspended, a user's account status will change from active to suspended. The user will no longer be able to log on. To re-enable the account, an administrator must edit the account and reset to active.
Multi-Factor Authentication (MFA)
Enable Multi-Factor Authentication
Multi-factor Enabled will force one time code based MFA on all users, unless they are specifically excluded from this on their user profile.
Any user without MFA will be forced to set this up on their next Login.
Information on setting up MFA can be found here...
Allow MFA 'Remember Me'
This setting allows users to skip entering the MFA one time code the next time they log on. This only takes effect on the machine and browser the Logon used, while the cookies are persisted.
Over-riding account settings
...