When 2FA is enabled and someone is added into the SupporterBase organisation, they are redirected to a account setup page where it is unclear that 2FA is required in order for that user to log in and use SupporterBase.