I have MFA enabled, so I authenticate with user/pass, then a OTP from an authenticator app, then an SMS code is sent.