You can configure policies for your users that involve authentication methods and actions users can do once they have logged in to their workstation.

Note: Are you seeing something different? See instructions for the SSO & MFA Admin Console.