We’re testing where MFA should appear as a step before production or limited production requests.
The 2FA flow is shown inline in the production/limited production request forms.
The 2FA setup is triggered from within the production/limited production request forms, opening in a modal.
An MFA modal appears before you can access the production/limited production request forms.
A dedicated MFA setup step on the dashboard points you to the security page to enable MFA.