Can you enable "2-Step Verification" on Google Apps ?
2-Step verification adds an extra layer to Gmail / Google Apps accounts by requiring another access code to be entered when attempting to login. This code will be sent to a mobile phone.
However, 2-step verification is not compatible with Single-Sign-On, which is enabled on Thunderbird's Google Apps domain.
For more details, see the requirements section of this Google Apps admin page: