AZF4112E TOTP User object is missing KEYLABEL
Explanation
When TOTP changes the registration state to PROVISIONED, a keylabel is created automatically. This message can occur if you deactivated the user for TOTP and cleared all tags for that user.
User response
Re-register the user as described in Provisioning IBM MFA users.