www.skux.ch/blog

sudo vim /etc/pam.d/gdmpassword

19    @include common-password
20    auth required pam_google_authenticator.so nullok

—
Source: google-authenticator-libpam
nullok
Allow users to log in without OTP, if they haven’t set up OTP yet.
—