Purchasing and supplying a multi-factor authentication (MFA) system