How to add TOTP 2FA to openSUSE LDAP?

Ah, so it’s solely available for SUSE organization staff, @malcolmlewis?