There are several reasons a user may need to remove their OTP seed, but usually involves them setting up a new phone or switching OTP apps. This comes in as a request from the user to the AppGate Admin as there is no self-service for this. Once the seed is removed, and the user logins again, they will be prompted with a QR code to setup their OTP again.
Resolution / Suggested Action - Version 6.0 and Later
In the Admin UI, select Usage from the top menu, and navigate to "Default Time-based OTP Provider Seeds". Once here you can mouse over the user click on the Remove button on the right side. OTP Seed
Resolution / Suggested Action - Version 5.5 and Earlier
In the Admin UI, navigate to System->MFA Providers, and select name of the OTP provider used by the IdP. Scroll to the bottom of the screen and click the "Manage Seeds" button. Once here you can mouse over the user click on the Remove button on the right side.