I know many has asked for a two factor MFA field yes this would be nice.
were importing from Windows AD to SC. We have the defined groups already as the rule set. If the importer can see there is a match already example be (we use the email address in our rules) that they would assign that rule for this user.
Customer support service by UserEcho