We use Vigilix (the partner in the upcoming RSPA webinar) for some of our sites in addition to primarily using ConnectWise Control. They do 2-factor auth the way we want Control to do it and unfortunately we may have to move all of our sites over to Vigilix if Control doesn't implement this soon.

This is definitely a PCI requirement and we will have to abandon ScreenConnect if it cannot be implemented.