So i've installed a plug-in which allows me to enable two-factor authentication for my users. The problem is that to enable the plug-in i have to log in as that user and enable it via their profile page (wp-admin).
This isn't a problem except for the fact that there's nothing stopping the users from logging in and disabling the two factor authentication which is an issue.
I've looked around at a few issues and none have seemed to work, essentially i want restrict backend access to only a select few (myself and few others).
I've tried stealth login and a few some htaccess solutions and none have seemed to work.