Both settings are incompatible. We validated that DiscourseConnect is disabled before enabling 2FA but were missing the other way around.