2fa with Google SSO

I was trying to setup 2fa on our metabase instance, and as per this comment, it seems that with Google SSO we can enable 2fa, however, Google only support 2fa when we use their Identity Platform, which requires different configuration method on the client side, which doesn't seem possible at the moment.

Could you confirm if 2FA is even possible using Google SSO atm or not?

We use Google SSO for Metabase and we get 2FA, this is what we use Protect your business with 2-Step Verification - Google Workspace Admin Help

oh you mean, I have to enable the 2fa requirement at the workspace level and I can't have it just at the Metabase level?