Nextcloud 15 - Force Two-Factor Authentication: How can users log in to set up?

On Nextcloud 15 I have the ability to force two-factor authentication (great!). But when I force two-factor authentication with the official TOTP authenticator app, my users are unable to access their accounts to scan the QR and generate backup codes (like a one-time grace login). Is there any kind of workaround I can try? Thanks!