Thanks for clarifying. As I see it there’s 3 situations:
-Users who log in through Auth0 and who log in at least once during the month: these are counted against your MAU, regardless of if they have 2FA or not.
-Users who log in through Auth0 but don’t log in even once during the month: these are not counted towards your MAU. You’re not licensed on total stored users but on Monthly Active Users.
-Users who log in through your own system, without Auth0: these cannot be counted against your MAU since we don’t know about them.
I think it would be beneficial to have a quick chat with our Sales team if further clarification is needed. You should see a “Talk to Sales” link in the top right corner here with a small form to fill out and they will call you back.