MFA IDCS vs IAM in OCI using request.user.mfaTotpVerified

Summary

request.user.mfaTotpVerified is not set when logging on to OCI using IDCS

Content

I am able to setup MFA for IDCS users as detailed here;

1. https://www.ateam-oracle.com/multi-factor-authentication-with-oracle-identity-cloud-services

I am also able to setup MFA for IAM (OCI Local Users) users as detailed here;

2. https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/usingmfa.htm

However when I modify my policy to include where request.user.mfaTotpVerified='true' none of my IDCS authenticated users can see any objects in OCI.

Are the two mutually exclusive ?

Version

OCI