The only two factor that can be done is with Cisco ISE and doing EAP-chaining which requires AnyConnect. Other than that, I don't think any other two factor will work.
Sent from Cisco Technical Support iPhone App
-Scott
*** Please rate helpful posts ***