Enterprise plan customer can enforce 2FA/MFA for all members of the organization in Settings. If your organization uses SAML SSO, you should set up 2FA in your IdP instead.
Domain restriction
Contact support to claim your domain and restrict other Workspaces or Organizations from using it.
IP whitelists
Contact support to restrict users from accessing your Organization from outside a set IP range.