2FA/MFA login for SAP CLoud platform integration Service

HI Experts,

We are planning to implement and subscribe for SAP Cloud Platform integration Suite ( CPIS on Cloud foundry) as middleware. I have few questions for which i am seeking your advice.

The ask from the business is to have 2FA login for all Vendors and IT Support team on the CPIS tenant to ensure there is no authorized access to the production environment

1. For implementing 2FA, What cloud platform service is required ? Is it Identity provisioning service?

2. Does the above service is included when we go for CPIS subscription or it need to be bought additionally.

3. Please share more about how we can activate 2FA for the CPIS login.

BR,

Shobhit Taggar