...
By enabling multi-factor authentication for a domain, all users with an email address that matches the MFA active domain are required to set up multi-factor authentication the next time they log in. Infoblox SSO Portal currently supports Okta Verify and Google Authenticator for multi-factor authentication.
If you deactivate multi-factor authentication, any individual multi-factor authentication configuration for users with an email domain that matches the selected domain will be removed from the system. Deactivating multi-factor authentication for a domain will set the multi-factor authentication status of users with an email domain that matches the selected domain to "Disabled,” regardless of their previous individual configuration.
...