My organisation has disabled users' ability to turn off MFA. I have Lastpass Authenticator on my phone, so to get work done I need my Surface plus my iPhone.
Background story: Today I left my phone at home, so I had to email the support team to turn off MFA for me. However, they didn't respond. I ended up going home to get my phone, then coming back into the office. Wasted 1.5 hours doing this round trip.
To avoid being locked out of Lastpass when I leave my phone at home, I'd like to have some sort of MFA option on my Surface. This FAQ says that it's possible to have multiple MFA devices set up:
* Can I use more than one form of Multifactor Authentication at the same time?
However, I'm not sure if this will help, because the FAQ says that the second device is only invoked if the first has been disabled. And disabling MFA is the very thing that we aren't allowed to do at my organisation.
Can anyone confirm (or clarify) my understanding of whether multiple MFA devices would work in my situation?