Capabilities/factor/capability:cannotpassfactor

• Users with this capability must use another factor in Multi-factor authentication to authenticate.
• This capability is not set for any of the default roles.
• The capability must be applied at system level by assigning users a system role.

For details of how this capability can be used, see the information about 'User capability' in Multi-factor authentication.