In this day and age, this is a must. This should be a very high priority.
Any update to this? The live logs are nearly useless without these enhancements.
I completely agree with this request. I've got multi-factor authentication enabled on every account that offers this feature (Facebook, Microsoft, Google, Dropbox, Etc.), and EVERY single one of them does in this fashion:
First Screen: Authenticate username and password
Second Screen: Provide 6 digit 2FA code.
This way if you get the username and password wrong, you'll never even get to enter the 2FA key. Provides the same security of not knowing if 2FA is enabled or not up front, with the added bonus of not confusing users.
I was lucky enough to even find this information out because someone complained about 2FA not working on the forums.