# After enabling MFA, user is locked in a confirmation\_pending state

**URL:** <https://community.auth0.com/t/after-enabling-mfa-user-is-locked-in-a-confirmation-pending-state/8474>\
**Category:** Get Help\
**Tags:** bugs, guardian, confirmation\_pending, mfa\
**Created:** [October 13, 2017, 1:23am UTC](https://community.auth0.com/t/after-enabling-mfa-user-is-locked-in-a-confirmation-pending-state/8474 "2017-10-13T01:23:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ian1](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@ian1](https://community.auth0.com/u/ian1)\
**Post date:** [October 13, 2017, 1:23am UTC](https://community.auth0.com/t/after-enabling-mfa-user-is-locked-in-a-confirmation-pending-state/8474/1 "2017-10-13T01:23:15Z")

</div>

After globally enabling MFA, some users are locked in a “confirmation\_pending” state, even after disabling MFA afterwards. ![alt text][1]

I then go to Actions \> Reset Multi Factor, and the message above briefly goes away. After a few minutes, I refresh the page and it reappears. When the user attempts to log in using username-password authentication, Auth0 returns the following error:

> [2017-10-11 19:22:36,527] ERROR libs.cloud.django\_auth0.backends Auth0 error message: User is not enrolled with guardian

The problem is, MFA is currently turned off. Is there any way to un-enroll this user? Even after deleting and recreating the user with the same email address, the confirmation\_pending status comes back. Any ideas?

---

<div class="post-metadata">

**Author:** ![jmangelo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jmangelo/32/7923_2.png) [@jmangelo](https://community.auth0.com/u/jmangelo)\
**Post date:** [October 13, 2017, 7:54pm UTC](https://community.auth0.com/t/after-enabling-mfa-user-is-locked-in-a-confirmation-pending-state/8474/2 "2017-10-13T19:54:50Z")

</div>

I’m not aware of any explanation for getting into that state, but if you haven’t done so already, I would recommend trying to perform an explicit deletion of that enrollment through Management API, in particular through the [delete Guardian enrollment endpoint](https://auth0.com/docs/api/management/v2#!/Guardian/delete_enrollments_by_id).

You can get the identifier of the enrollment in question by performing a previous call to [get enrollments by user endpoint](https://auth0.com/docs/api/management/v2#!/Users/get_enrollments).

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2018, 5:56am UTC](https://community.auth0.com/t/after-enabling-mfa-user-is-locked-in-a-confirmation-pending-state/8474/3 "2018-03-02T05:56:58Z")

</div>