...kinds of questions that are clearly outside the public record. • You can configure your account so that any one-time accesscodes are sent to an administrator’s phone or the user’s cell phone – effectively adding a second factor to the process...
http://www.myonelogin.com/downloads/myOneLogin_Security_paper.pdf