Sure. IT can fall back to sms.
Edit: yep, here's the error I get trying to sign on to the Apple Developer Program, after I logged in (which involved getting a code via SMS):
> Your Apple ID currently has two-step verification turned on, but two-factor authentication is required. After you turn on two-factor authentication, signing in to your developer account will require both your password and access to your trusted devices or trusted phone number.