First, check the junk or spam folder in your email client. DKIM and DMARC settings for your organization may cause these emails to end up filtered as spam.
Next, check quarantine in the compliance center. Often, messages containing a one-time pass code, especially the first ones your organization receives, end up in quarantine.