...
To use 2FA and any OTP login option users must not be blocked, and also must have a verified phone number. Login process is defined by settings like Password OTP validity value, login no of tries, Password Validation no of triesMaximum number of OTP request, Maximum number of OTP request. The admin can block and unblock the user from a list (flag for unblock/block). Temporary block exists to avoid misuse of sending - Admin unblocks a temporarily blocked user by deleting related records from OTP actions. A permanently blocked user or with an unverified phone will get the message 'Please contact support' when try to login using 2FA.
...