Immich supports oidc, you should be able to do all auth (including totp) in your auth provider and that all works in the app. I use pocketid with mine and it works everywhere.