Salesforce users with the Chatter Free or Chatter External license are exempt from the multi-factor authentication (MFA) requirement. When the Require multi-factor authentication (MFA) for all direct UI logins to your Salesforce org setting gets turned on, either by you or by Salesforce, the setting automatically excludes these users. Keep in mind that you may need to exclude other MFA-exempt use cases on your own.