# Force enable MFA, but it doesn’t work **URL:** \ **Category:** Uncategorized\ **Created:** [April 24, 2026, 11:46pm UTC](https://openziti.discourse.group/t/force-enable-mfa-but-it-doesn-t-work/5792 "2026-04-24T23:46:42Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![maika](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/maika/32/4170_2.png) [@maika](https://openziti.discourse.group/u/maika)\ **Post date:** [April 24, 2026, 11:46pm UTC](https://openziti.discourse.group/t/force-enable-mfa-but-it-doesn-t-work/5792/1 "2026-04-24T23:46:42Z")
Hello, I created a new Auth Policy in the Console and enabled TOTP MFA for Secondary Authentication in this policy. I then set this Auth Policy for an Identity. However, after I joined this Identity using Ziti Desktop Edge, there is no response at all when I click to enable MFA. Could you please advise what the issue might be? ![ziti](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/8/8df1a399e140f918b8d336cc08d703f1ec1765fb.gif) ---
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [April 26, 2026, 1:17pm UTC](https://openziti.discourse.group/t/force-enable-mfa-but-it-doesn-t-work/5792/2 "2026-04-26T13:17:47Z")
Hi @maika, What version of the controller are you running and what OS are you running ZDE from (Mac or Windows)? Also could you detail the exact set of steps you run so I/we can try locally? The precise order often matters including the minutia like "i added the identity, removed it and added it back" or "i stopped the tunnel, did xyz". I ask because sometimes it's not easy for us to reproduce. I think you're hitting a known issue. See if any of these seem like what you're doing: - [No MFA prompt after enabling MFA on ext-jwt-signer-based identity · Issue #885 · openziti/desktop-edge-win · GitHub](https://github.com/openziti/desktop-edge-win/issues/885) - [MFA on Bind services never prompt · Issue #886 · openziti/desktop-edge-win · GitHub](https://github.com/openziti/desktop-edge-win/issues/886) - [Enrolling identity with TOTP-required auth policy silently fails in UI · Issue #947 · openziti/desktop-edge-win · GitHub](https://github.com/openziti/desktop-edge-win/issues/947) ---
**Author:** ![maika](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/maika/32/4170_2.png) [@maika](https://openziti.discourse.group/u/maika)\ **Post date:** [April 26, 2026, 1:54pm UTC](https://openziti.discourse.group/t/force-enable-mfa-but-it-doesn-t-work/5792/3 "2026-04-26T13:54:23Z")
Hi @TheLumberjack It's the same as this issue. - [Enrolling identity with TOTP-required auth policy silently fails in UI · Issue #947 · openziti/desktop-edge-win · GitHub](https://github.com/openziti/desktop-edge-win/issues/947) Controller: v1.6.15 Windows ZDEW: 2.9.7.1 Steps to Reproduce: 1: Create an auth policy requiring TOTP 2: Assign the auth policy to a new identity 3: Download the identity JWT 4: In ZDEW, enroll the JWT 5: Enable MFA ---
**Author:** ![CLBRITTON2](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/clbritton2/32/4091_2.png) [@CLBRITTON2](https://openziti.discourse.group/u/CLBRITTON2)\ **Post date:** [June 23, 2026, 7:57pm UTC](https://openziti.discourse.group/t/force-enable-mfa-but-it-doesn-t-work/5792/4 "2026-06-23T19:57:52Z")
Hey @maika We released ZDEW [2.11.2.4](https://github.com/openziti/desktop-edge-win/releases/tag/2.11.2.4) which includes the fix for this issue. The fix is currently on the beta stream but will work it's way to stable soon. ---
**Author:** ![maika](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/maika/32/4170_2.png) [@maika](https://openziti.discourse.group/u/maika)\ **Post date:** [June 30, 2026, 12:58am UTC](https://openziti.discourse.group/t/force-enable-mfa-but-it-doesn-t-work/5792/6 "2026-06-30T00:58:07Z")
Hi @CLBRITTON2 , It's working now, Thanks