We refer to authentication objects in general, since not only classic OTP tokens or smartcards can be used in the context of multi-factor authentication, but also smartphones, virtual tokens, telephones, SMS, email, SSH keys, X.509 certificates and any other features.