On: Saas CTO Security Checklist

[vivienm]

django-two-factor-auth seems to be a good choice (using django-otp alone might be considered too). I agree that pyotp is less suited, since it does not integrate easily with Django.