We need several enhancements in the enquiry forms to make 2nd factor setup for existing users flexible and convenient.
It must be possible to select users who do not have a given credential setup. Enquiry triggering condition context needs to be enriched with an appropriate variable.
Also fix UI of condition editing (wider field, new tooltip).
Enquiry automation should allow for activating 2nd-factor user opt-in for user. Under the hood this should trigger creation of appropriate system attribute with given value.