Currently, 1 minute is allowed for the entry of the verification code for 2FA. When using email as the delivery method this has often passed before the email arrives in the email inbox. Allow local admin to set the time out to suit local tech environment. For my organisation, 5 minutes is more realistic for email delivery.