Enable MFA for all users
A simple GUI experience for activating MFA for all users. From Azure Portal as well as Microsoft 365. Potentially even a wizard with organization wide authentication settings and then activation.
Activation potentially even to be customizable to be Enabled, enforced, but even scheduled and enabled to be configured next logon in the portal only.