MFA issue in sandbox

If it’s an elevated user, that would require MFA. If the elevated user is coming from IDP, MFA can be setup there.

For more details: Deprecation of Strong Authentication on Admin Step-Up