If you want to use OTP authentication within WiFis described in article Enabling 2FA with privacyIDEA for wireless networks and are using Sophos WLAN, you have to ensure that „Fast Transition“ is off, since this required the OS to logon twice (beginning with Windows 10).
Took me some time to find the error