The list of 2-factor-authentication providers was extended by OpenID. You can also manage OpenLDAP TOTP tokens with LAM.