Choose one. You cannot use both for the same tenant.
Hardware Key
YubiKey or other FIDO2 authenticator. Most secure.
📱 On mobile: tap YubiKey to the back of your phone (NFC), then touch the sensor.
Authenticator App
TOTP code from Google Authenticator / Authy / 1Password.