I have the following custom policy TP for the phone verification step (which create a temp ID) for MFA.
PhoneFa