Admin sign-in
Scan with an authenticator app, then enter the 6-digit code.
Every registered device, who it's assigned to, and their company. Assign or remove inline — no need to pick a user first.
The customer runs an installer carrying this token; their computer auto-appears in their address book.