diff --git a/app/controllers/users/piv_cac_setup_from_sign_in_controller.rb b/app/controllers/users/piv_cac_setup_from_sign_in_controller.rb
index 14c19fa1159..9adf292f47f 100644
--- a/app/controllers/users/piv_cac_setup_from_sign_in_controller.rb
+++ b/app/controllers/users/piv_cac_setup_from_sign_in_controller.rb
@@ -2,8 +2,12 @@ module Users
   class PivCacSetupFromSignInController < ApplicationController
     include PivCacConcern
     include SecureHeadersConcern
+    include ReauthenticationRequiredConcern
 
     before_action :confirm_two_factor_authenticated
+    before_action :confirm_recently_authenticated_2fa, if: -> do
+      IdentityConfig.store.reauthentication_for_second_factor_management_enabled
+    end
     before_action :apply_secure_headers_override, only: :success
     before_action :set_piv_cac_setup_csp_form_action_uris, only: :prompt