There are some cases where users will have to set up the off-site MFA logon manually.