SAML 2FA using SSO on APM

Hello Experts,

 

I am currently in a situation where SAML single factor authentication using SSO is already configured on APM and authentication server is AD. I now need to enable 2FA and authentication server for second factor is Symantec VIP. Can I know the exact approach I need to follow here and how do I modify access policy already created for 1FA? I also attach here existing access policy for 1FA which needs to be modified for 2FA.

 

Thanks in advance.