How do we handle an enrolled employee getting a new card after they lose the one they enrolled with?

For 1FA, the user may auto-enroll after their profile is deleted from the Alcatraz Admin Portal.

For 2FA, the user must enroll at an enrollment station.