Despite you having an AdditionalUserClaimsPrincipalFactory here, that checks if a user has 2FA enabled or not and adds the claim accordingly. You do not call RefreshSignIn at any point after enabling MFA. This will mean you do not have to have the instructions in your Layout.cshtml that tells the user to sign in and out again if they've activated MFA.
title="MFA is NOT enabled. This is required for the Admin Page. If you have activated MFA, then logout, login again.">
For example, this could go here
Should be noted this might not be the best solution as per this SO answer regarding the MFA claim
Despite you having an
AdditionalUserClaimsPrincipalFactoryhere, that checks if a user has 2FA enabled or not and adds the claim accordingly. You do not call RefreshSignIn at any point after enabling MFA. This will mean you do not have to have the instructions in your Layout.cshtml that tells the user to sign in and out again if they've activated MFA.title="MFA is NOT enabled. This is required for the Admin Page. If you have activated MFA, then logout, login again.">For example, this could go here
Should be noted this might not be the best solution as per this SO answer regarding the MFA claim