Hello,   Yes, I'd expect it to be the Broker(s) if you're setting up 2FA at the farm level.  Otherwise, it will be the Web Access server if you only have it set at the Webaccess level.   Thanks. 
Hi,  I installed a 2FA server and that server needs to configure RADIUS clients. wich server of my vWorkspace farm is in this case my client? If I understand the documentation that should be the Connection broker, is that correct?
vworkspace RADIUS client