Set 'Configure OTP' as the Required user actions.
User will be prompted to configure OTP next time they login.