You must delete user and the user must re-enroll.
For 1FA, the user may self-enroll after deleting the profile.
For 2FA, the user must enroll at an enrollment station.
You must delete user and the user must re-enroll.
For 1FA, the user may self-enroll after deleting the profile.
For 2FA, the user must enroll at an enrollment station.