title: OAuth2 but require Multi-Factor Authentication (MFA)
body: <p>I have an app with confidential PII (social security number, payroll information).  I'd like to enable users to login with OAuth IDs (Google, Linked In) for convenience but require those accounts have multi-factor authentication enabled in the identity provider, i.e. fail the login through OAuth2 if the user hasn't enabled MFA in their underlying identity provider account.  This allows me to avoid exposing my confidential information to a weak GMail password.</p>
  
  <p>Is there any way to do this?</p>