MFA and passkeys

Set up a passkey on supported devices or use an authenticator app. Sensitive administrative actions can require a recent strong-authentication check even when the normal session is still active.