Emily is the IT administrator for a medium-sized company. She wants to improve the security of user accounts and is considering enabling passwordless sign-in using Microsoft Authenticator. What are the prerequisites she should be aware of before implementing this feature?