Fusion 26A - Option to Enforce Multifactor Authentication or Not in Non-Production Environments

Summary:

In 26A readiness docs for Common Technologies and User Experience, the following feature is listed:

- Option to Enforce Multifactor Authentication or Not in Non-Production Environments

Content (please ensure you mask any confidential information):

Going through the content of this feature, It seems that for Fusion Production environments MFA will be mandatory (unless you login via an external IdP, such as a Corporate SSO). Is this correct?

If it is correct, does this apply from 26A onwards or does this apply immediately with the identity upgrade to OCI IAM?

Will MFA be enforced only when logging in from UI correct? MFA will not affect also basic auth for fusion REST API, correct?