Once a user has set up multi-factor authentication (MFA), there is no way for them to add another device in the future if they didn't save the QR code on initial set up. It would be good to allow the QR code to be generated again without involving an admin.
For example, you lose your phone and use a recovery code to login. At that point, you should be able to access the QR code to set up a new device.
@BernSzukalski I added this to a recent blog post you had but figured it might be better in Ideas. Thanks.