Sometimes the user clicks through the MFA setup, and ClassLink (aka FalconLink) doesn't stop them. Instead, it just prompts them to do MFA in the app they failed to setup the first time... it happens...
To fix it, the user must go back and configure MFA. To do that, you have to reset their MFA settings... here's how you do it.