Multi Factor Authentication support for NW SSO?

Hi Experts,

is Multi-Factor Authentication (MFA) supported by NW SSO?

  What i've read is the Secure Login Server has a SecureLoginModule20RADIUS module which can use to integrate with the RSA Server.

  My query is

1.   Does the RSA token replace the need for a user to enter any passwords while he/she logons to SAP? or
2. The user enter his/her user id and password as usual, and there will be a pop-up for him/her to enter the code from the RSA token?

Thanks!