User is challenged to complete authentication using a time-based one-time (TOTP) password after their username and password have been verified when TOTP software token MFA is enabled. UI shows a second page for your user to enter the  TOTP password after they submit their username and password.