- The method should allow configuring new MFA methods - In order to configure new MFA methods, the user is asked to use an existing, configured MFA method - Default fallback is an email (this is required if the user does not have any MFA methods configured at the moment) - Decide which methods can be used for authorising the MFA configuration