You have shared your constraints regarding setting up two-factor authentication via a mobile app.
Before we begin development, we would like to present you with alternatives to email or SMS 2FA so that you (or your company's security/IT manager) can evaluate them.