...

For information on Single Sign-On Login method and the Single Sign-On Login URL, see Single Sign-On Login on  on the SAML Single Sign-On Settings page page.

Standard/Authenticator App (TOTP)

...

During the initial login, an enrollment page will be presented to the user assuming they authenticated successfully using their username and password:

You can switch to setup manually by clicking the Click to setup manually button:

Image Modified

Next, the user will be prompted to enter their Time-based one-time password (TOTP) to login to the controller: 

After the initial enrollment, you will only have to enter the Time-based one-time password (TOTP) after authenticated successfully using your username and password.

...