Hi Anton,
* Login as 'admin' to ADSelfService Plus.
* Navigate to 'Configuration' tab --> Self-Service --> Multi-factor Authentication --> 'Advanced' button on the right side.
* 'Enrollment' tab --> General --> check 'Hide Enrollment tab from end users portal for enrolled users.' --> OK.