Multifactor Authentication policy not enforcing MFA enrollment on account creation

[snarfed]

Hi! I'm an admin on a LastPass Teams account. I want to require all new accounts to enroll in MFA, so I turned on the Multifactor Authentication policy on https://lastpass.com/company/#!/settings/policies , for all users, which - if I understand right - should require all new users to enroll in MFA when they're first invited and create their account. Right?

Except that's not happening. Newly invited users aren't getting prompted (much less required) to enroll in MFA when they create their accounts. Any idea why not?

Thanks in advance!

[AKHBGT]

Make sure you have a "Default" or what some are calling a "Primary" Multifactor selected.

As an example, we made Google Auth the Default MFA, but then we started to activate LastPass MFA and we did it in a very scheduled manner (log the user out, forcing them to reset up the NEW MFA enrollment, otherwise they won't have that challenge show up until their next session timeout).