It's possible to do this, but you need to model this. After the normal login, you can redirect the user to a form where the user needs to enter a code. If this code is accepted, he will continue in the application, otherwise logged out. You just need to create some logic to send a sms to the mobile phone of the user. Extra steps to achieve this:
Edit after comments:
Don't use this solution, it's not safe.