Loss of a second factor

The following procedure may be used when a user needs to access a protected application, but doesn't have his second authentication factor available:

The user may enter its login/password on https://mydomain.trustelem.com.

Instead of activating the usual second factor, he/she selects « Use an alternative method ».

The user may then ask a rescue code:

He has to click on « Ask for a rescue code ».
All administrators receive an email alerting that a rescue code is requested by a user.
One of the admins has to click on « Rescue code » in the « Alerts » tab of the Trustelem admin dashboard.
This code can be transmitted to the user, after having properly checked the user's identity.
The user has 24h to use this one-time rescue code.