Break-glass access. Microsoft sign-in is the primary method once enabled.