Clarify certain details about the EMU setup user account (#60162)

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Laura Coursen <lecoursen@github.com>

Author: 3 people

content/admin/concepts/identity-and-access-management/setup-user.md

@@ -29,8 +29,8 @@ When you create the password, we strongly recommend that you **enable two-factor
 
 Unlike provisioned managed users, the setup user cannot sign in via SSO. 
 
-- **Without 2FA enabled**, you must provide a recovery code **every** time you sign in.
-- If **2FA is enabled**, you can sign in with a successful 2FA challenge response. You only need to provide a recovery code to access enterprise settings.
+- **Without 2FA enabled**, you must provide an enterprise recovery code **every** time you sign in.
+- If **2FA is enabled**, you must sign in with a successful 2FA challenge response. You only need to enter an enterprise recovery code to access enterprise settings.
 
 {% data reusables.enterprise-accounts.emu-password-reset-session %}
 
@@ -40,4 +40,4 @@ The setup user **cannot** be deleted, because it is essential for maintaining au
 
 ## Further reading
 
-- [AUTOTITLE](/admin/managing-iam/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes#downloading-codes-for-an-enterprise-with-enterprise-managed-users)
+- [AUTOTITLE](/admin/managing-iam/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes#downloading-codes-for-an-enterprise-with-enterprise-managed-users)

content/admin/managing-iam/understanding-iam-for-enterprises/getting-started-with-enterprise-managed-users.md

@@ -26,15 +26,17 @@ The setup process for the environments is similar. However, you will need to **p
 
 ## Create the setup user
 
-After we create your enterprise, you will receive an email inviting you to choose a password for the setup user, which is used to configure authentication and provisioning. The username is your enterprise's shortcode (chosen by you or randomly generated), suffixed with `_admin`. For example: `fabrikam_admin`.
+After we create your enterprise, you will receive an email inviting you to choose a password for the setup user, which is used to configure authentication and provisioning. This is the first enterprise owner account, and the only user account in the enterprise that is not SCIM-provisioned. The username is your enterprise's shortcode (chosen by you or randomly generated), suffixed with `_admin`. For example: `fabrikam_admin`.
 
 Using an **incognito or private browsing window**:
 
 1. Set the user's password.
-1. Enable two-factor authentication (2FA), and save the recovery codes. See [AUTOTITLE](/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication).
+1. Enable two-factor authentication (2FA) for the setup user account, and save the recovery codes. See [AUTOTITLE](/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication).
 
    > [!WARNING]
-   > All subsequent login attempts for the setup user account will require a successful 2FA challenge response.
+   > All subsequent login attempts to the setup user account will require a successful 2FA challenge response.
+1. Download the enterprise recovery codes. See [AUTOTITLE](/admin/managing-iam/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes).
+
 {% data reusables.enterprise-accounts.emu-recommend-password-manager %}
 
 {% data reusables.enterprise-accounts.about-setup-user %}