Enforce two-factor authentication on all controllers / actions

Question

I\'ve built an authenticated .net core (5.0) web application using Identity (2.2) and set up two factor authentication using a smartphone authenticator app. This is all working