Sign in with your authenticator app. This deployment issues enrolment codes through your administrator.
Lost your device? Use a recovery code
Each recovery code works once and is then spent — the codes you saved when you enrolled. Use one only when your authenticator is unavailable; once you are in, re-enrol to get a fresh set. Recovery codes never open a platform-admin session.