We have a few password self-service policies mostly using the Microsoft Authenticator app but certain users need to use Questions instead. We have a single user that, in the admin console, appears to have the correct password self-service policy.

But when they sign in to the self-service portal to enroll, it is showing a different policy applying asking her to enroll using the Authenticator app.

I have tried resetting her account even though it shows that she is not enrolled with no luck. I have also had her use private or incognito mode to make sure it is not a cache issue. Your help is greatly appreciated!