Authenticator type
OptionalbarcodeURI for QR code (for Push/Guardian enrollment)
OptionalbindingBinding method (e.g., 'prompt' for user code entry)
Optionalid
Authenticator ID
Delivery channel used
OptionaloobOut-of-band code for verification
OptionalrecoveryRecovery codes (generated when enrolling first MFA factor)
Response when enrolling an OOB authenticator