My colleague got an invite with read-only access to a Box, and while she is able to input her username and password, it then redirects her to a screen that asks for a 2FA code, which she has not set up. Resetting the password only repeats the process.