This message was deleted.

For us we've handled this on a case by case basis depending on importance. In an ideal world we choose an authenticator that generates a token, and our password manager handles providing those tokens. We use keeper for this. For things that don't do token codes we try to use email or txt to email codes to group emails to get around. Neither is perfect

yeah, unfortunately group text or email isn't an option with what we're trying to solve this for.

If you can find an MFA with a Windows client, set it as Published App

Maybe this helps @Neal Dolson https://www.online-tech-tips.com/windows-10/how-to-use-google-authenticator-on-windows-10/