After signing in, you'll be asked whether to trust this device. Admin and Manager accounts also require 2FA on first sign-in for any new device.