Authenticator type
Optional barcodeURI for QR code (for Push/Guardian enrollment)
Optional bindingBinding method (e.g., 'prompt' for user code entry)
Optional idAuthenticator ID
Delivery channel used
Optional oobOut-of-band code for verification
Optional recoveryRecovery codes (generated when enrolling first MFA factor)
Response when enrolling an OOB authenticator