Your organization uses Microsoft Entra ID P2 licenses. Security wants every user to register for MFA proactively so that Identity Protection can automatically respond to risky sign-ins by prompting for MFA. Currently many users have never registered any authentication methods, so risk-based Conditional Access cannot challenge them and instead blocks or fails their sign-ins. Which Identity Protection feature should you configure to ensure users register their MFA authentication methods within a defined period?