For the purpose of this tutorial, we'll assume that your Google Workspace administrator has turned on the enforcement of 2-Step Verification and you're setting it up for the first time.
Now, let's get started!
First, download Google Authenticator (you can also use 1Password or any other Authenticator App you may already have).
Next to http://bionic.cat/google2step.. Sign in if necessary and then scroll down and click on "2-Step Verification" to get started.
Important: once you set up your Authenticator App, you need to make sure you enable 2-step verification. It doesn't automatically enable after you add your Authenticator App.
Please see this (silent) video for a quick demonstration of setting up an Authenticator and then enabling it.