If the 2FA enrollment is toggled as optional for an entire tenant or particular users within a tenant, these VSA Users can skip the two-factor authorization process:
Warning: Two-factor Authentication Enrollment will be mandatory for all VSA users for all tenants starting on 01/01/2020.