The testing example used here has a 2-step login procedure with Static Password in the first step and the One-Time Password in the second step.
Logon Procedure
User Experience
Palo Alto Portal
Palo Alto Gateway
First-Step:
Static AD Password
Second-Step:
One-Time Password