How does OTP authentication fit into MFA? (Blog: OTP)