Google is launching two new verification options for organisations that use third-party identity verification.
Company administrators can enable two ways of verifying a user's identity. The first is 2-Step Verification: an extra verification step that is triggered when specific conditions occur (e.g. when signing in to the account from a new device). The second method of protection is risk-based login, which analyses the user's behaviour patterns and assesses the risk of a malicious attack. If it judges the user's behaviour to be out of the ordinary, it prompts them to verify their identity – by a code sent to a registered device, a code delivered by phone call, entering their employee number, or an e-mail sent to a recovery account.
Source of information: https://gsuiteupdates.googleblog.com/2019/09/use-google-2-step-verification-with-3rd-party-identity.html