AZF4112E TOTP User object is missing KEYLABEL

Explanation

When TOTP changes the registration state to PROVISIONED, a keylabel is created automatically. This message can occur if you deactivated the user for TOTP and cleared all tags for that user.

User response

Re-register the user as described in Provisioning IBM MFA users.