Description: Controls which MFA methods users can use (e.g., authenticator app via QR, email codes).

How it works: AegisShield exposes allowed methods in the enrollment UI and validates codes using the selected method’s provider.

How to access / configure:

1. WP Admin → AegisShield → Login Guard → MFA (Pro).
2. Select allowed MFA methods.
3. Save and test enrollment for a non-admin user.

Recommended setting: Allow authenticator + backup codes as primary; keep email MFA as fallback if needed.