A company needs an emergency access path if workforce federation fails. What is the best design principle?

1. Disable MFA on all accounts permanently to avoid lockouts.
2. Share one unmonitored administrator password with all employees.
3. Rely solely on the same federation dependency for every emergency method.
4. Establish tightly controlled break-glass access with strong authentication, monitoring, and periodic tests.