Since the update to 9.0R3 the "Allow new TOTP user registration to happen via external port" has to be checked also for the normal logins on the external interface, not only for the first time registration.
Looks like a bug. Can anyone reproduce this issue?
I am also experiencing the same issue after the latest upgrade. TOTP fails for existing users unless I have "Allow new TOTP user registration to happen via external port" checked.
Were you able to get this working correctly leaving that setting unchecked?
Hmm... I know there has been enhancements made to the TOTP instances in 9.0R3 upgrade.
May be there is an issue with that, not sure... Create a case with Pulse Secure TAC for investigation.