Why not use more standard two factor authentication user experience? The user experience is an integrated hot mess that bounces between web and app, buttons that do not function on certain devices, as well as actions on the app that just spin forever like trying to paying a bill. If you want users to accomplish tasks do more multiplatform tests on update rollouts and some user testing would not hurt either.