We're planning to add Google SSO which supports 2FA. Would that work for you?