I have exactly the same question. I have different type of users/portal and I don’t need 2FA for all of them, so I need to find a way to make it optional.