We have an Enterprise plan, in our settings, we have not enabled the Two-factor authentication (2FA) as shown.
However, today some of our users were prompted to enable two-factor authentication during normal login (not via SSO). They were asked to setup 2FA.
This happened to a number of users, not all users were prompted. Why was it?
The expectation is, when this 2FA is still deactivated, it should not prompt users to use 2FA to sign in.
Any idea?