As part of the HIPAA security rule, all PHI should have multi-factor authentication for login credentials. We already utilize the app Microsoft Authenticator and something like this would be beneficial as a healthcare organization.
You won't be notified about changes to this idea.