One-Time-Password Tokens, such as RSA Tokens or Yubikey, are supported as an authentication methods available at SAML 2.0 IdP.