# Enrolling MFA TOTP from ZDEW (Clustered controllers)

**URL:** <https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew-clustered-controllers/5413>\
**Category:** Support\
**Created:** [December 8, 2025, 12:13pm UTC](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew-clustered-controllers/5413 "2025-12-08T12:13:45Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![montwepa](https://avatars.discourse-cdn.com/v4/letter/m/7ba0ec/32.png) [@montwepa](https://openziti.discourse.group/u/montwepa)\
**Post date:** [December 8, 2025, 12:13pm UTC](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew-clustered-controllers/5413/1 "2025-12-08T12:13:45Z")

</div>

Hi guys,

Been working with clustered controller setup and noticed a same bug I encountered [before](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew/5166)

Basically when I create a new Auth Policy and give it TOTP Required, I'm unable to enroll that identity, I never get the QR-code popup. This only happens on the HA-setup, on my other non HA setup, I'm able to enroll without problem (v1.6.9).

The controllers on the HA were just updated but the same bug existed on v1.6.9

Controller: v1.6.12 ZAC: 3.12.5  
ZDEW: 2.7.4