I noticed from the AuthSheild solution that the user needs to enter SAP user and password and then they are prompted for an OTP. Is this what you want ? Or, do you want to use RSA SecurID or RSA ODA (On-Demand Auth) ? Can you share your requirements, other than "no client software"
Thanks
Tim