For TOTP to work, TOTP needs to be configured on the firewall, and the user needs to enroll in an authenticator application.
TOTP only works when it is enabled in the firewall.
To configure the firewall
Update the field for One-time password method and select TOTP.
Before logging in for the first time, a GVC user needs to enroll with a TOTP application such as Microsoft Authenticator or Google Authenticator. The following is a general procedure for user enrollment that you can customize for your users.
The initial TOTP request takes place after you use your username and password to authenticate for the first time.