Hello dan_4,
Maybe the client and server logs can reveal what's going on with the first MFA and why that fails. Without knowing what happens there it's kind of hard to say where the issue may be. If you think the logs may contain sensitive data it's best to use our ticket system at
https://openvpn.net/support to send over that data for analysis.
Kind regards,
Johan