2fa now coming to our VPN. I knew this was coming. I don't think it's so bad but I hope it works with the FOSS clients. The last time I tested it a couple of years back you could use the otp feature of the 2fa app to get in. Fingers crossed.
sully.site is one server in the network