Management frame protection REQUIRED — a station that cannot do it is refused.
Mandatory for WPA3, and the bit that breaks older clients when a network is upgraded. Paired with the bit beside it: capable but not required is the transitional configuration, and required is the one that actually stops deauthentication attacks.
RSN > RSN Capabilities > MFPR