Two-factor authentication can now be enforced for group type roles. You can also filter people according to whether they have two-factor authentication enabled or disabled.