Authenticator type discriminator
Optionalbarcode_Barcode URI (otp: otpauth:// format, oob: Guardian/Push QR code)
Optionalbinding_Binding method (oob only - prompt, none)
Authenticator ID
OptionalnameAuthenticator name (oob/email only)
Optionaloob_OOB channel (oob only - required for oob)
Optionaloob_OOB code (oob only - for enrollment verification)
Optionalrecovery_Recovery codes (first enrollment only)
OptionalsecretTOTP secret (otp only - required for otp)
Enrollment response from Auth0 API (snake_case). Maps to EnrollmentResponse in SDK-facing interface.