SpongeAuth currently does not check two-factor authentication when a user is signing in through Google. However, nothing on the website indicates that this is the case. It should be clear to users that 2fa only applies when logging in with a username and password.