We have several external users that are reporting issues with two step verification requirement. Our box environment has the setting enabled where external users can only authenticate via authenticator app (TOTP).

Example user issue: unable to generate the QR code to use Duo app for authentication. (using Duo).