As a regular 2FA user temporarily unable to use my second factor,
I want to be granted a fallback access for a limited period of time,
so that I can access SPs requiring 2FA.
→ process independent of Shibboleth (helpdesk-provided OTP)
(from redmine: issue id 3646, created on 2016-04-13)