Hello,
I recognize the issue your having, and from what I remember last time I added an 365 Global Admin OTP I had to remove the spaces in the "Secret" for it to be accepted by PasswordState. Keep everything else as it is at 30 seconds, 6 digits and SHA1 and it should work.
Best regards
Peter