This is surely the silliest question, but in EspoCRM 8.1.4, I've:
  • set my authentication method to OIDC
  • turned off 2FA
  • configured the required OIDC
...