Microsoft Authenticator works on my GrapheneOS (I have the Play Services, not sure if it matters).