There is an answer to this question to this link.
Is there a better way, a more automated way, instead of making the user go in the console and look for how to manage the authenticator?
What happens if after that he removes the authenticator?
Expected:
User tries to log in
Console asks for password change
Colsole asks for scanning the code and introducing the codes
User logs in with new password and the code from authenticator