Hi all.
Just wanted to share here that although Okta is not officially supported we have been able to get it work for 2FA as a basic Other standalone time-based PIN.
We set 2FA against a group and then place users in one at a time.
I wrote a couple of docs about it if anyone would like the details.