Login Credentials: User logs in with their username and password. Second Factor: The system prompts for a second factor, which could be a time-based one-time password (TOTP) sent to a mobile app or via SMS. Verification: User enters the code, and the system verifies it before granting access.