Allow 2FA for SAML and LDAP users (#4000)

* inline totp image as data uri to prevent caching issues
* allow 2fa for ldap and saml users
* allow 2FA access for super admin to all profiles

src/Security/TwoFactorCondition.php

@@ -25,11 +25,6 @@ final class TwoFactorCondition implements TwoFactorConditionInterface
         /** @var User $user */
         $user = $context->getUser();
 
-        // only internal users support 2FA currently
-        if (!$user->isInternalUser()) {
-            return false;
-        }
-
         // never require 2FA on API calls
         if (str_starts_with($context->getRequest()->getRequestUri(), '/api/')) {
             return false;