Steps to reproduce:

1. Add user to MFA group, enroll user to MFA
2. Remove user from MFA group
3. Add user to MFA group again, login with this user

Result:
TOTP set in step 1 is asked
Expected:
Enrollment again