Hi @ReneC,
Welcome to Box Community and glad to assist!
Admins can allow multiple 2FA methods for managed users, but each user can enroll only one primary method for their individual Box account.
To get as close as possible to your goal for managed users: You can set Allow all methods or limit to selected methods
- Go to Admin Console > Enterprise Settings > Security.
- Enable Require multi-factor authentication for all managed users.
- Under Authentication Method, choose Limit to selected methods.
- Select:
- Security Key and Authenticator app (TOTP) if you want to allow either of those stronger methods for managed users.
- Optionally set Authentication Frequency to Every login or a custom frequency.
Thanks for posting!