diff --git a/admin/tool/mfa/classes/manager.php b/admin/tool/mfa/classes/manager.php
index b4e54b74b19..9b7bbdc1e60 100644
--- a/admin/tool/mfa/classes/manager.php
+++ b/admin/tool/mfa/classes/manager.php
@@ -532,11 +532,8 @@ class manager {
         }
 
         // WS/AJAX check.
+        // Prevents any potential bypassing of multi-factor authentication.
         if (WS_SERVER || AJAX_SCRIPT) {
-            if (isset($SESSION->mfa_pending) && !empty($SESSION->mfa_pending)) {
-                // Allow AJAX and WS, but never from auth.php.
-                return self::NO_REDIRECT;
-            }
             return self::REDIRECT_EXCEPTION;
         }