If your SP per se doesn't really care, then the SP needn't ask for a specific context. The decision to prefer or require can be made by the IdP (or by Duo, if you tell it not to require enrolment). We are primarily going with 2-factor based on user or location (Duo "trusted networks"), not by SP.