If you use Google Authenticator on your personal or Lab issued mobile device, the device must be configured to require a lock screen (PIN, pattern, fingerprint, etc.).