All indirect resellers are required to enforce MFA for each user in their partner tenant. The indirect reseller must enable MFA.