outlook web access authentication

I'm looking for a 2-factor authentication solution for Outlook Web Access.  I'd like to avoid certificates and tokens, and it would be great if the solution were out of band.  Any suggestions?