When an employee is added to the system, a welcome email will be sent. In this email, there is a link that the employee should tap to create a user and connect to an Authenticator app. If they do not do so within 21 days, this link will stop working. Then you need to send out a new login link and it is done as shown in the picture.