Hi @Graham Conner , Please try re-requiring MFA for the user More info here. This should force them to reauthenticate, and if this is still not working it will help narrow down the cause. Please let me know if this doesn't work.
If this answer helped you please mark it as "Verified" so other users may reference it.
Thank you,
James