# Enrolling MFA TOTP from ZDEW fails

**URL:** <https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew-fails/5482>\
**Category:** Support\
**Created:** [January 13, 2026, 2:07pm UTC](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew-fails/5482 "2026-01-13T14:07:09Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![montwepa](https://avatars.discourse-cdn.com/v4/letter/m/7ba0ec/32.png) [@montwepa](https://openziti.discourse.group/u/montwepa)\
**Post date:** [January 13, 2026, 2:07pm UTC](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew-fails/5482/1 "2026-01-13T14:07:09Z")

</div>

Hey!

Following my previous [post](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew/5166/5) from last year, seems that this is still a bug.

Tried with ZDEW 2.8.1.0 (latest I believe) also attached a GIF of the issue.

In short: Identity enrollment fails on ZDEW if you are using custom auth policy that requires TOTP

![mfa-error](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/d/d877d58866ebecc091f1295e78288484897d0885.gif)

---

<div class="post-metadata">

**Author:** ![andrew.martinez](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/andrew.martinez/32/540_2.png) [@andrew.martinez](https://openziti.discourse.group/u/andrew.martinez)\
**Post date:** [January 13, 2026, 2:19pm UTC](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew-fails/5482/2 "2026-01-13T14:19:46Z")

</div>

Hey there, thanks for taking the time to post.

This is an issue I was working on before the holidays, as it is a controller issue. It requires significant refactoring and is taking longer to address. It is on my list of things in active development.

---

<div class="post-metadata">

**Author:** ![montwepa](https://avatars.discourse-cdn.com/v4/letter/m/7ba0ec/32.png) [@montwepa](https://openziti.discourse.group/u/montwepa)\
**Post date:** [March 3, 2026, 8:31am UTC](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew-fails/5482/3 "2026-03-03T08:31:07Z")

</div>

Hey!

Wondering if this has been fixed already in a release or will it be part of Release 2.0.0?

Thanks in advance 🙂

---

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [March 4, 2026, 6:27pm UTC](https://openziti.discourse.group/t/enrolling-mfa-totp-from-zdew-fails/5482/4 "2026-03-04T18:27:25Z")

</div>

Hi @montwepa,

I _-thought-_ this was fixed but I tried it again now and it failed using ZDEW App: 2.9.5.0 Service: v1.11.0 openssl. I will reopen [New Identity with TOTP required cannot enable MFA · Issue #877 · openziti/desktop-edge-win · GitHub](https://github.com/openziti/desktop-edge-win/issues/877)