CryptoCARD can be used to provide 2 factor authentication. This can easily be integrated into the VPN server for Mac OS X, although it will take a little while to get integrated into Open Directory. However, it’s cost effective and available for OS X.