To enable MCM login with MFA: login to MCM as the Business Admin or Global Admin, go to Accounts and set up the MFA options for the administrators and the regular users.
As of v5.0, MFA is supported with Active Directory or Morro Users mode. Once enabled and setup, admin can go to MCM > Team to opt-out of MFA for individual users.
In MCM > Account, MFA options are shown in the following. MFA can be enforced for BA only, BA+GA only, or All Users.