I know this is an old post, but THANK YOU!!!! I've been fighting this exact same issue for 2 days, never thought to check the legacy MFA setup.