...
For this example we are going to create a group called "3FA required" as the logon procedure it will use will have 3 login steps, and will use a new logon procedure with an addition additional logon step (hence 3fa rather than 2fa).
2. Create a new logon procedure and make this procedure a group-held procedure
Now that a new logon procedure has been created we need to make it held by the group who's whose members will be using this logon procedure ("3fa required" in this example).
...