Managers are asked for an authenticator code next. Staff on a new phone need a manager to approve it once.