Allow the admin to disable the recovery code step in the enrollment for end-users to simplify the process.
End-users don't know what to do with them.
VPN-only users can't actually use them (they can be used to sign in to Core UI only).
Consider leaving the recovery code step for admins.
Allow the admin to disable the recovery code step in the enrollment for end-users to simplify the process.
End-users don't know what to do with them.
VPN-only users can't actually use them (they can be used to sign in to Core UI only).
Consider leaving the recovery code step for admins.