We have a requirement that MFA be enabled on local accounts, and this included the primary admin account (System Adminstrator).
The issue I'll expect we'll run into is one person will have to register MFA with their authenticator app, thus being the "keyholder" for that account. This would cause us to have to reach out to that person to get the code.
I'm wondering if anyone has any experience/recommendations when it comes to doing shared MFA, or a better alternative?
