The method of enforcing MFA will depend upon the licensing of the tenant. That said, there is definitely a way to enforce MFA for all users across multiple tenants.