Hi @ywaka,
Welcome to the Auth0 Community!
Unfortunately, it is not possible to enforce MFA before changing passwords. However, you can enforce it after they have changed passwords.
For more information, please refer to this related post.
Cheers,
Rueben