Q: icloud email via office 2016 with 2 factor authentication

See the following from Frequently asked questions about two-step verification for Apple ID - Apple Support

How do I sign in to my account using an app that doesn't support entering two-step verification codes?

You can generate an app-specific password from your Apple ID account page and enter it into the password field of the app that you want to sign in to. This will allow you to sign in securely even if the app you’re using doesn’t support entering verification codes. For example, you might use an app-specific password to sign in to iCloud using a third party email, address book, or calendar app.

If you want to generate an app-specific password, sign in to your Apple ID account page. In the Security section, click Edit > Generate Password.

Learn more about app-specific passwords.