Ask for credentials only if credentials are enabled but incomplete or always ask for OTP is true