Responding to your shameless plug, I work on this stuff (auth and enrollment for the security token), would love to chat if you have time!