I am not sure you fully understood what I tried to say.
Let the option set at GA and try to MS Authenticator (on your mobile device). If it works, then its either a bug in the app or a communication issue with GA and virtualmin.
If the MS app doesnt work too, then its something within your virtualmin installation.