Returning accounts use an authenticator on the next step. New accounts finish setup there.