Only two in our case. Refer to gimli's post and read about "sole source" following successfully fulfillment of phase two requirements. "OOB/MFA for mobile device" is exactly what Ram was awarded a US process patent for. The use of keyloggers to track and geocate our troops with their mobile devices is the DoD problem driving this. The SFOR shield is the sole source solution IMHO.