Contoso currently allows users to approve sign-ins with Microsoft Authenticator push notifications. Following a wave of MFA fatigue attacks where users blindly approved malicious prompts, the security team wants to reduce accidental approvals without deploying new hardware or moving all users to passwordless immediately. They also want approvers to see which application and location triggered the request. Which configuration should you enable in the Authentication methods policy for Microsoft Authenticator?