SSH into TrueNAS as non-root with 2FA enabled (TrueNAS-12.0-U3.1)

[blikoy]

hi guys

I'm about to go crazy about this seemingly simple problem: how can I configure TrueNAS to accept SSH logins from non-root users while 2FA is enabled?

My setup:

• I have a non-root user configured with a password and 'bash' as a shell
• 2FA configured and working for the system (i.e. I can log in as root via the WebGUI using password + 2FA via authy)
• I don't want to SSH-login via root directly
• I can sudo into my non-root user XXX via the WebGUI Shell OK

when I try to log in as the non-root user via SSH (using putty), I get the following:
login as: XXX
Keyboard-interactive authentication prompts from server:
| Password for XXX@titan.home.net: [<- I enter my configured password (which works in Samba)]
| One-time password (OATH) for `XXX': [<- I enter the (system-wide) Authy 2FA one-time password]
End of keyboard-interactive prompts from server
Access denied

what am I doing wrong? Thanks a ton for all help