Update getting-started-with-enterprise-managed-users.md to add setup …

…user's intended purpose, and that SSO needs to be enabled prior to downloading the enterprise recovery codes (#54322)

Co-authored-by: Anne-Marie <[email protected]>

content/admin/managing-iam/understanding-iam-for-enterprises/getting-started-with-enterprise-managed-users.md

@@ -37,15 +37,23 @@ After we create your enterprise, you will receive an email inviting you to choos
 Using an **incognito or private browsing window**:
 
 1. Set the user's password.
-1. Enable two-factor authentication (2FA), and save the enterprise recovery codes. See [AUTOTITLE](/admin/managing-iam/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes#downloading-codes-for-an-enterprise-with-enterprise-managed-users).
+1. Enable two-factor authentication (2FA), and save the recovery codes. See [AUTOTITLE](/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication).
 
    > [!WARNING]
-   > All subsequent login attempts for the setup user account will require a successful 2FA challenge response or the use of an enterprise recovery code to complete authentication. To avoid being locked out of your account, save your enterprise recovery codes.
+   > All subsequent login attempts for the setup user account will require a successful 2FA challenge response or the use of an enterprise recovery code to complete authentication. To avoid being locked out of your account, after enabling single sign-on, save your enterprise recovery codes. See [AUTOTITLE](/admin/managing-iam/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes#downloading-codes-for-an-enterprise-with-enterprise-managed-users).
 
 {% data reusables.enterprise-accounts.emu-password-reset-session %}
 
 {% data reusables.enterprise-accounts.emu-recommend-password-manager %}
 
+   > [!NOTE]
+   > Once single sign-on has been configured on the enterprise, the setup user is only intended to be used going forwards for:
+   >
+   > * SCIM provisioning via its {% data variables.product.pat_generic %}.
+   > * To regain access to your enterprise in the event of an issue with your identity provider by utilizing the enterprise's SAML recovery codes.
+   >
+   > For other enterprise administration tasks, you should use a provisioned managed user account with the enterprise owner role.
+
 ## Create a {% data variables.product.pat_generic %}
 
 {% data reusables.enterprise-accounts.emu-create-a-pat %}