SSL VPN 2FA options - or how to prompt for the OTP token?

I'd like to roll out SSLVPN to some of our users, but the password concatenated with the OTP code is very awkward.... You can't save the password, and you can't easily use a password manager either....