I have MFA for endpoint setup on our servers and when logging in it functions without issue.  But when a server is locked and then unlocked it does not prompt for MFA and lets the user right in.  Is this expected behavior?  If not what needs to be changed to adjust this behavior.