You have the option to select just one, two, or all three of these options. 

Enable Two-factor Authentication - Turns 2-factor on.

However, you can choose to Skip entering the 2-factor code if you wish.

To use this feature, you will need to have an Authentication app already installed on your phone. We recommend Google Authenticator.

Force Two-factor Authentication - Enabling this feature, you will not be able to Skip entering the 2-factor code as you will be forced to use a code.

This can be turned on and off at will.

HR Managers manually submit data to Payroll - Stops the data automatically being pushed to your payroll and time and attendance applications.

Your HR manager would need to manually send the data after they have checked it for accuracy.