diff --git a/src/directoryserver.js b/src/directoryserver.js
index c9fb5947b..406cb43b3 100644
--- a/src/directoryserver.js
+++ b/src/directoryserver.js
@@ -314,7 +314,7 @@ async function userAuth(req, res, next) {
         verifyFunc = users.verifyWithUsername;
     }
 
-    const [error, user] = await safe(verifyFunc(commonName, req.credentials || '', '', { relaxedTotpCheck: true, totpToken }));
+    const [error, user] = await safe(verifyFunc(commonName, req.credentials || '', '', { totpToken }));
     if (error && error.reason === BoxError.NOT_FOUND) return next(new ldap.NoSuchObjectError(req.dn.toString()));
     if (error && error.reason === BoxError.INVALID_CREDENTIALS) return next(new ldap.InvalidCredentialsError(req.dn.toString()));
     if (error) return next(new ldap.OperationsError(error.message));