Users require sometimes 2-Faktor Authentication, when SSO can not be used.
Implement 2-Factor auth based on TOTP (which is based on an open procedure (RFC 6238).
TOTP can be used with Apps likeĀ
Google Authenticator
Microsoft Authenticator
Authy
FreeOTP