Clarify instructions for enforcing country/region code restrictions

bernawy · web-flow · commit 17f68b304d7f · 2026-01-23T12:27:18.000-08:00
diff --git a/articles/active-directory-b2c/phone-based-mfa.md b/articles/active-directory-b2c/phone-based-mfa.md
@@ -145,7 +145,7 @@ To help prevent fraudulent sign-ups, remove any country/region codes that do not
     </TrustFrameworkPolicy>
     ```
 > [!IMPORTANT]
->Add this code to the _relying party policy_ to enforce country/region code restrictions on the server side. You must not define these elements only in parent policies; put them in the relying party policy.
+>Add the code in step 2 to the _relying party policy_ to enforce country/region code restrictions on the server side. You must not define these elements only in parent policies; put them in the relying party policy.
 
 1. In the `BuildingBlocks` section of this policy file, add the following code. Make sure to include only the country/region codes relevant to your organization:
 
