A help desk technician receives a ticket from a new employee who cannot complete sign-in. The employee's Conditional Access policy requires multi-factor authentication, but instead of being prompted for a code, the employee is stuck on a screen asking them to set up additional security information before continuing. The technician confirms the account is enabled and the password is correct. What is the most likely cause of this behavior?