BUG - Enabling OTP Breaks Client Authentication Agent

If one enables the OTP feature for the Client Portal the Client Authentication Agent (CAA) no longer works properly, it will require both the user's password and OTP code. Please separate CAA and Client Portal in OTP Settings so this no longer happens as it makes OTP and/or CAA utterly worthless.

 

https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/33679621-split-caa-from-user-portal-for-otp