Global configuration, which MFA methods are available

[teon]

trafficstars

We should add a enterprise setting, to specify which MFA methods (e.g., Email, TOTP, biometry) are available and which should be disabled (due to security team preference).