how do you turn on 2 factor firm wide (not individually)
You can't. Intuit has no firm-wide way to manage users like that. Every user needs to enable it manually.
