Authenticator types to enroll
OptionalemailEmail address (optional for email channel - uses user's email if not provided)
Encrypted MFA token
OOB channels (sms, voice, auth0, email)
OptionalphonePhone number in E.164 format (required for sms/voice)
Enroll OOB authenticator (SMS/Voice/Push/Email).