Authenticate with the break-glass credentials, then enter the email to enroll. You'll be redirected to complete the normal one-time-PIN login.