Thanks for the reports, folks, this issue should have been fixed on November 16th, via this commit: FIX: Regression when enforced 2FA is enabled by pmusaraj · Pull Request #24415 · discourse/discourse · GitHub – I did a quick check locally just now and can’t reproduce it. Can you confirm again, please?
If you’re running a self-hosted instance, you might have to rebuild. If your site is hosted with us and you can still repro the issue, please let us know the URL so we can look into it further.