Call the carrier to report it and cancel service to the phone/tablet.
Do a remote lock or data wipe via another device.
Use the “Unenroll all” feature in the Support Dashboard in the case devices are lost or stolen, so that the user will be forced to go through Multi-factor Authentication again during their next login.