When the user’s profile requires a High Assurance session at login, but the admin is logged in with a standard security session level, then it will prompt MFA for the user to approve.

To avoid this issue or situation, admins should always log in using MFA, which automatically results in a High Assurance session.