How-to
How to complete first sign-in and factor enrolment
Use your institution account, enrol a permitted factor, and store recovery codes. SMS and voice are never offered.
Sign-in uses the local credential store for the plane you are on. Entra ID is not the default.
On first sign-in the broker returns factor-enrolment-required. Choose authenticator app, push, email code, or passkey.
Platform roles must enrol a hardware passkey. Recovery codes re-enrol a factor. They never disable two-factor.