It's best that you ask him to login using his back...
# general
n
It's best that you ask him to login using his backup codes and then reset the 2FA himself.