The process of enabling two-factor authentication on AnyConnect SSL VPN with DualShield is almost identical to the process of enabling Clientless SSL VPN.
There are two different methods of setting up the Logon steps on DualShield, depending on how Cisco ASA is setup.