put https://{server}/api/v2.1/org//admin/users//two-factor-auth/
As the team administrator, you can force each team member to use 2-factor authentication (2FA).
When the value of force_2fa is 1 in this request, the member will be requested to activate 2FA by scanning a QR code next time they log in. To cancel enforcing them to use 2FA, change the value to 0 and send this request again.
This request is to be distinguished from the next request, because cancelling the enforcement doesn't necesssarily Disable 2FA for A User in Team, which serves a different purpose.