How to setup MFA using Sophos Connect Client

Question

Hi all, 
 We are new to Sophos XG, we are using the Sophos Connect Client for VPN access which is working great. However, we would like to implement MFA for users trying to connect in. Is there an option I need to tick somewhere or something I need to do. I could be missing it, but I couldn't find any KB relating specifically to this. 
 Thanks in advance though.

FormerMember · Accepted Answer

Hi David Ashcroft 
 Thank you for reaching out to the Community! 
 Follow this document to Configuring two-factor authentication . 
 
 Navigate to Authentication > One-time password > Settings > Enable One-time password. 
 Select Auto-create OTP tokens for users. 
 Add specific users or select all users; it depends on your requirements. 
 Enable OTP for User Portal and IPsec remote access. 
 Obtain token and passcode by following the steps outlined under: Obtain a token and passcodes . 
 
 Thanks,