Google Authenticator for 2FA (without SSO)

Allow Google Authenticator as a 2FA solution instead/on top of Duo. This is for people who do not have Gsuite SSO but want to use a free 2FA solution that does not require an additional account anywhere.