2FA is now automatically sent when it is needed. Only TPP can have access to consent url to check if 2FA is required.