Check out this demo to see how MFA can be used wherever access control decisions are made, to maximize risk reduction you need MFA at multiple touchpoints through the infrastructure both at the vault level and at the host level.