We currently use Duo.com two-factor support. It would be awesome if the web portal HTML5 gateway supported this. Currently, we have it enabled on the session hosts, but every time the resolution gets changed it logs in and requires a push again, which is not ideal for an already logged in user. If it were on the login to the website it would be 10x better.