...
First time the user, with 2FA enabled, sign in she is prompted to pair a device and login to dRofus with an additional one-time password as explained in Two Factor Authentication (2FA) using one time password
When 2FA is activated you, as administrator, can turn it off by selecting the same button;
...