Two-factor authentication is required on this site — set up Google Authenticator
After password login when TOTP is mandatory and not yet configured, the login UI shows this guidance (auth.mandatory2faRequired) and moves to the setup step.
Why this happens
Site policy requires Google Authenticator; the account has no enabled 2FA yet. Informational gate — not a hard failure. Follow the QR + code flow.
Diagnose and fix
1. Scan the QR; enter the 6-digit code to confirm.
2. If setup fails, see Could not start authenticator setup — sign in again / load/setup-expired siblings.
3. Admin: confirm Two-factor authentication mode is intentional.
4. After setup, future logins use password + authenticator code.