Creating a project saves a setup draft. Nothing generates — source selection and planning arrive with the engine milestones.
Administrators always require two-factor; they enroll at first sign-in.