You have to go to Setup > Users/Roles > Two-Factor Authentication Roles. From there change the drop down for your Admin role under "Two-Factor Authentication Required" to "2FA Authentication Required", then choose the duration you want and hit save. We found that even though the role has a check mark under "Mandatory 2FA,"…