Yes you can enable MFA only for a sub scope of user. In ADFS 2019, you can configure the that with Authentication Policies (you will have to provide the criteria to trigger MFA).
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
