It is possible to enforce second-factor authentication (2FA) for SURFdrive for your whole organization.
This can be done via SURFconext by enabling MFA on the IdP of the institute. If this enabled, all SURFdrive users will require a 2nd factor SURFconext (tiqr/yubikey/etc).
Manuals to install and configure the 2FA factors can be found at: SURFsecureID gebruiken
Please consult with SURFconext Manager at your institute for enforcing the 2FA on SURFdrive.