no luck with Duo two-factor auth (or device pass)

Works great with regular gmail, and DID work with work google mail, but then we added two-factor authorization using Duo two-factor auth.

Basically, on a computer I go to gmail.com and it asks for username, I put that in entirely (including the .edu part), and it redirects to a login page where I work. I put in my username and password and then my phone buzzes and says there is a login request, so I hit "Accept" and it continues to log me in to my work email.

This works with metromail, but only as long as the session to gmail is valid.

There is support for a "device password" but that does not work at any of the web logins. It IS what the phone's mail (and most other mail things) can use.