Accounts with MFA enabled complete a second verification step before a session is created.