Security Basics: Re: Multi-Factor Authentication

[admin () globaldebtregistry com]

There are those that would say the personal image solution used by so many banks for their online presence is not true 
2-factor authentication because it simply doubles up on the "what you know" factor. Not too cool.
If you want real 2f, take a look at WiKID http://www.wikidsystems.com
And here's how to integrate it with Juniper
http://www.wikidsystems.com/documentation/howtos/how-to-add-wikid-two-factor-authentication-to-an-aventail-ssl-vpn/

They offer a completely software based 2-factor solution in both a commercial and open-source model.  They have ldap, 
radius, and tacacs support built in to the product so integration is most times a matter of configuring some settings 
and not custom coding an integration.