Hello, As far as I have been able to test, I have yet to find a way of making my users autonomous in resetting their (Google Authenticator) MFA enrollment. You would be surprised how many tickets we get of new users locking themselves out after enrolling and deleting the key, so I think it could be a feature worth developing. Kind regards