Two-factor authentication is disabled on this site
Account /api/account/2fa/setup or /enable refused because TOTP is not allowed on the site. UI may also announce the same via disabledOnSite.
Why this happens
Two-factor authentication mode is off. Same situation as Disabled by administrator / Google Authenticator is unavailable on this site labels in Settings.
Diagnose and fix
1. Admin: set Two-factor authentication mode to optional or mandatory.
2. Members: refresh Account Settings after the change; then set up.
3. Distinct from mandatory-mode “cannot disable” messages.