How do I allow user to change two-factor authentication app when Two-factor is enforced?

[Dean Stelow]

How do I allow user to change two-factor authentication app when Two-factor is enforced? I have a user that wants to change Authentication app on different phone.  There is a warning that says if admin enforced, talk to the admin for help.  Well, I am the admin and I don't how to do this.  The warning states that if they disable two-factor, they will not be able to get back in to re-enable it.

-thanks, Dean

[Eko Budiyanto]

It's funny if everything work fine with the other 2FA then it suppose doesn't have a matter with our time sync right? at first this was the first thing i do, but this solution doesn't work for me. But never mind i stop using this 2FA, i hate to waste time to solve the problem that out of my control, lol.

[madra]

Actually. Scrap that.

I just had the same thing happen when trying to log into another site using 2FA. It turned out that somehow the option to sync Date/Time with the network had got turned off in my Android settings and my phone's clock had drifted a few minutes off.

Resync'd time with the network and everything's working fine again.

Sorry for the 'false flag'!

[madra]

Same here. 

This is happening today for me when trying to log in with 2FA. I'm using the 'Authenticator +' Android app. So, it's obviously not app-specific.

I've never had any problems before using 2FA with this same app and this device. But I'm getting knocked back every time today: