How to turn off 2FA for tunnels. There are no Identity Providers in your account

I set up a new Cloudflare tunnel to a Proxmox container with Ghost CMS running in Docker, which I would like published to the web from my domain without 2FA since it is a public blog. I had one-time-pin set up to an email as a global policy. I tested the tunnel from outside my network and everything worked great after I entered my one-time pin. So I tried to figure out how to turn off the one-time-pin by deleting the authentication method and now I just get “There are no Identity Providers in your account”.

I would like to know how to turn off the one-time-pin for your tunnels or selectively for one sub-domain/public hostname.