You can enable multi-factor authentication by setting mfaEnabled to true with POST CREATE User, POST CREATE User (Import), or PUT UPDATE User MFA Enabled.

You cannot update mfaEnabled with PUT UPDATE User or PATCH UPDATE User.