As mentioned by @root69 , I enforced MFA on the trust policy and removed it from the regular policy and now it works.