Versions Affected: Any version prior to 9.0.2.
Decription: Users cannot authenticate after inputting the TOTP during Two-Factor Authentication when a change is made to the datastore type.
Cause: When users enroll for the TOTP, the datastore type that is selected is used to search for that attribute within your Active Directory. By changing the datastore type, it automatically changes the search attribute thus not being able to properly search for the TOTP value in the Active Directory.
Resolution: Whichever search attribute which was used when users enrolled for the TOTP is what needs to be in the search attribute under the search filter. The "searchFilter" field can remain the same, but the "Search Attribute" needs to match the configuration used for when users enrolled.