Background:

Currently, when a Staff user wants to enable 2FA, the Super Admin must first enable the "Allow 2FA" permission under Company Details for the relevant roles.

However, enabling this permission does not activate 2FA automatically. The user still needs to complete the setup by either:

* Logging out and logging back in to trigger the 2FA setup banner, or

* Resetting their password, which sends an email containing the password reset link and 2FA setup instructions (although in some cases the email is not received).

This makes the onboarding process for 2FA more complicated than necessary, especially for less technical users.

Reason:

We would like to encourage more customers to enable 2FA and improve overall account security. Recently, we've seen multiple account hacking incidents particularly among customers in Indonesia. Making the setup process simpler and more accessible would likely increase 2FA and help reduce security risks.

Feature Request

So I have two feature requests if this is possible: