Don't all Google products support application specific passwords? Without built-in support for two-factor auth, it's cumbersome since you have to generate a password on your own, but anything with a password box works.
That's the way 2-step auth works. If you have 2-step auth enabled, and the application supports 2-step it will prompt for your username, normal password, and a one-time token. If the application doesn't support 2-step you have to generate an application specific password (which is a random string). The application specific passwords are only for clients that don't support 2-step (like IMAP and XMPP clients).