Google authenticator - APM

The issue with doing this on the BIG-IP is that you can't make control plane changes from the user plane ie a virtual server/iRule cannot update a datagroup directly ( or at least, not without some added complexity ). It would be possible to store it in a subtable or suchlike though, and provide an iRule which outputs the entries in an API manner, then use an iCall script to query the API and write the entries to the datagroup on a periodic basis.