Reference Guide
...
Using MFA with HTTP Proxy
Enabling OTP for Users
to enable otp for a user group navigate to administration > 2fa provisioning open the user group management tab click the enable otp button of the selected user group (the whole row will turn green when otp is enabled)