MS auth service as such does support TOTP (though even then it won't stop bugging you about the authenticator) but then it probably depends on how those resources are configured. Never been on admin side of it so don't know if it's on by default.