fix providers not getting populated

idp/dex/provider.go

@@ -286,6 +286,7 @@ func ensureStaticClients(ctx context.Context, stor storage.Storage, clients []st
 			old.Name = client.Name
 			old.Public = client.Public
 			old.PostLogoutRedirectURIs = client.PostLogoutRedirectURIs
+			old.MFAChain = client.MFAChain
 			return old, nil
 		}); err != nil {
 			return fmt.Errorf("failed to update client %s: %w", client.ID, err)

management/server/idp/embedded.go

@@ -203,6 +203,10 @@ func (c *EmbeddedIdPConfig) ToYAMLConfig() (*dex.YAMLConfig, error) {
 		}
 		// Absolutely required, otherwsise the dex server will omit the MFA configuration entirely
 		os.Setenv("DEX_SESSIONS_ENABLED", "true")
+
+		for i := range cfg.StaticClients {
+			cfg.StaticClients[i].MFAChain = []string{"default-totp"}
+		}
 	}
 
 	// Add owner user if provided