When a user is created via API, the account is automatically enrolled in Email as a factor.
- API
- Email MFA Enrollment
This is considered normal behavior since the user is created with an email, which is also a valid factor. Even if Email is selected only for recovery and not Authentication, our system will still list Email as an enrolled factor in the above situation.
