Once they enter their OTP they will be logged in.
Get the User to go to VPN port if not using 443) the Default it 4433.Edit the User group on the SonicWall as below and enable TOTP as the One-Time password method and click Apply and Ok.
SonicWall recently added the ability to integrate their appliances with Time-based Google and other 3 rd party authenticators.