Directories allow you to have centralized access to configuring user security settings. You can enable your users to set up two-factor authentication, choosing whether or not to make it mandatory. You can also modify a range of password requirements regarding its length, expiration, and more. 

Turning on Two-Factor Authentication 

Customizing Directory Security