...
For shared users the process is essentially the same as the 3rd party app steps above, except a screenshot of the QR code needs to be saved in a secure location and anybody who uses the account needs to scan it into an authenticator app.
For IT this is in the Team - IT > Salesforce folder