Multifactor Authentication set up within LastPass is not supported for federated users. While it is strongly recommended that you protect your account with Multifactor Authentication, it must be set up at the Identity Service Provider level (AD FS) – meaning that all multifactor authentication options must be disabled within the LastPass Admin Console and end user Account Settings – as it will result in federated users being unable to access their vault.