Enforce 2fa authentication on ssh connections

Hello,
We have about 1k of users in openldap database. All users conncts by ssh with google 2fa authentication. We have made script for enforce 2fa authentication.

Im studing privacyIDEA for authenticate user with 2fa and push. For ssh and wordpress.

Is there a way to enforce 2fa authentication for ssh and worldpress? users without 2fa do not login.
Users without 2fa only login on privacyIDEA site for create 2fa.

Thanks

Yes, this would be the default behaviour… …or it would depend on your PAM/SSH configuration.