Forum OpenACS Development: Re: Two Factor Authentication
There is even a manual available!
It was supposed to be premium and enterprise, but nobody asked for this so far. You can assume it's GPL V2 licensed.
Apart from that: TOTP seems to be the standard, with many open source autenticators for Android and iOs...