A login process that requires a user to enter a unique, one-time response to a login challenge or special code presented by an authentication server. The authentication server resides somewhere in the internal network and sends a login challenge to a user when he or she attempts to log in. The user must make the proper response to the challenge using a special hardware or software token.