One way for the user to have a two-step access configuration is to set up a mobile device (smartphone or tablet).
EPFL recommends the solution Google Authenticator which is available for several types of equipment and which allows to generate access codes on Android, iPhone, iPad or iPod touch.