Combining this with enterprise products such as Citrix Receiver have worked pretty well so far. Some companies that previously relied on RSA for this have migrated to using SmartCards with PINs instead.
A few years ago, it was realized that using number generating RSA keyfobs for authentication into VPNs was not a completely secure mechanism.
