Yes, just as each new account requires users to re-register, each unique RDS Secure Website account must activate MFA, even if the Secure Website role type associated with the new account is the same as the previous. Activation only needs to be completed once for each new Secure Website Account, unless you are setting up a new MFA device or you need to reset your MFA token. Ensure you have received the registration confirmation email before activating MFA; you must have an active and valid RDS Secure Website account prior to activating MFA.
Refer to Multi-Factor Authentication or the MFA Activation Quick Start Guide for additional information.
