*The question may be "too broad" or "unclean" but I'll try to ask for advice.*

We are thinking about to enable 2FA with Google Authenficator for all our services.

But the only concern for me now is that users will have to have a dedicated Authenticator's account for every service, let's say:

 - Github
 - AWS
 - Gmail
 - Jenkins

Maybe there is a better approach?
Something like using a self-hosted TOTP service... Although this I guess will require to have an SSO enabled between all account as well, but SSO is out of the scope of current tasks.