Currently we just have a switch "Require MFA for this location" since we only had internal MFA (based on defguard OIDC + MFA).

Now, if someone has external OIDC enabled (Okta/Google/Microsoft), the location can have either our own internal MFA or we can enforce external OIDC MFA.

We need a good UI for this, explaining that you can enable MFA internal or External (when configured).