How do I setup authenticator app on new device?

When you try to login into CTS? You should see the multi factor authentication sign up screen when you do.

You should be able to scan the QR code there.