It can be anything! An apex, subdomain, or even a URL.
Error: subdomains such as 2fa.mgmt.is.nl are not supported