Contoso wants all users to register security information so they can both reset their own passwords and satisfy multifactor authentication prompts. An administrator enables the self-service password reset (SSPR) authentication methods and sets the number of required methods to two. Several weeks later, the security team notices that many users who registered for SSPR are still being interrupted to set up MFA when they first hit a Conditional Access policy requiring MFA. Which action ensures a single registration experience covers both SSPR and MFA going forward?