Suggestion: Support MFA / 2FA for internal accounts

[goetzk]

Hi,
I'm creating this mainly as a discussion point because looking in the issue tracker i see no reference.

I would like to suggest that providence should support MFA for internal accounts to improve security of the system.
It seems to me that this would be beneficial in two main cases:

• SAML (or similar) login is enabled for general user accounts but administrator account still exists
• CA is deliberately in a configuration where some users are SAML and others are local accounts.

https://github.com/RobThree/TwoFactorAuth superficially looks like a feasible option but I don't know if that is the case for CA.

thanks,