Sign in with your password and authenticator.
In Google Authenticator, tap + → Enter a setup key. Use Direct as the account name, paste this key and choose Time based.
Keep access to your authenticator. Two-step verification cannot be reset by the administrator.
Open Direct in a separate tab
Your administrator provides your username and password. Add Direct to Google Authenticator on your first sign-in. Keep access to both: password and authenticator resets are not available.