Found out the problem. The google account associated with the email '''must''' have the authenticator set up/enabled before trying to connect the gmail account to Thunderbird to get it to prompt you to even use the authenticator. Once it's set up, a window should open to set up the connection and everything proceeds smoothly. But without setting it up ahead of time, there's nothing to prompt the user that doing that is required.