From 50cca58294fac55ef4eccddf026e223e100f4bfa Mon Sep 17 00:00:00 2001
From: Cameron Ball <cameronball@catalyst-au.net>
Date: Thu, 25 Sep 2025 09:34:47 +0800
Subject: [PATCH] Only modify  when the plugin is actually enabled

---
 classes/manager.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/classes/manager.php b/classes/manager.php
index 24d5810e..ac8ddc4d 100644
--- a/classes/manager.php
+++ b/classes/manager.php
@@ -614,7 +614,9 @@ public static function require_auth($courseorid = null, $autologinguest = null,
 
         if (!self::is_ready()) {
             // Set session var so if MFA becomes ready, you dont get locked from session.
-            $SESSION->tool_mfa_authenticated = true;
+            if (get_config('tool_mfa', 'enabled')) {
+                $SESSION->tool_mfa_authenticated = true;
+            }
             return;
         }