Issue with MFA Setup: Initial Registration Screen Not Displaying for Some Users

[Takamasa Kanno]

I have implemented MFA, but sometimes the initial registration screen for the authentication app, which should appear when users first log in, does not display. Upon investigation, it appears that if users have either an email address or a mobile phone number on file, the initial app registration screen is skipped, and they are directly taken to the MFA code input screen. For users without either an email address or a mobile phone number, the app registration screen does appear.

[Randheer Singh]

Hi @Takamasa Kanno ,

Please check if you have the MFA factor policy active.

• Email as MFA factor
• SMS as MFA factor

Thanks,

Randheer

[Takamasa Kanno]

Hi Randheer,

I’ve confirmed that the MFA factor policies are enabled. While email and SMS authentication work, we are experiencing issues with the initial registration screen for the authentication app not appearing. Instead, users are immediately shown the option to choose between email or SMS for verification, as shown in the image below.

[Takamasa Kanno]

After trying various approaches, we found that the issue occurs only when both of the following conditions are met:

• The email OTP for multi-factor authentication in the Multifactor Authentication Properties is set to True.
• The MAIL element in the MFA context is enabled.

It seems that the system works without issues if only one of these conditions is enabled.

[kack l]

Hi, I just came across your post and realized I'm facing the exact same issue.

The problem occurs only when both of the following are enabled:

• Email OTP in Multifactor Authentication Properties is set to True

• The MAIL element in the MFA context is enabled

Have you found any workaround or definitive solution for this?
I'm currently struggling with the same scenario and would really appreciate your insights.

Thanks in advance!