On the Identity Verification page in Setup, select the Enable Multi-Factor Authentication checkbox

Create a permission set that includes the "Multi-Factor Authentication for User Interface Logins'

permission, then apply the permission set to desired users

GMFA is enabled by default, each user simply registers a verification method from their personal settings

Click the Enable button in the Launch stage of the Multi-Factor Authentication Assistant