Finally figure this out:
If you setup a new suitecrm, you configure an smtp for 2 factor auth. Then use the crm. Lets say you go to your domain and change the email address password. Then you can’t login and it does not tell you that the smtp password is bad. Website just tells you session expired… Now users is in a loop and cant get in.
Iog says.
SugarPHPMailer encountered an error: SMTP Error: Could not authenticate
Solution change users table on that user to have a 0 in factor_auth. This turns off 2fa on that account. then you can get in to website and fix password on smtp with admin features.