If Password Login is disabled, you must first enable it before you can enable Time-based OTP.
Any code within the window is valid if it precedes or follows the expected code by the number of refresh intervals that you specify. The refresh interval is 30 seconds, and the default setting is 1.
You have successfully configured time-based one-time password authentication
For more information about configuring time-based one-time password authentication, see Using time-based one-time password authentication.