My organisation is hoping to implement MFA for Windows. Our end users are generally not permitted to have their cellphones on them which means that many of these MFA apps cannot be used.
We've tried DUO but their windows integration has either fail closed or fail open when offline, failopen means that MFA is essentially useless since one factor is removed when disconnected from the internet.
I'd appreciate any thoughts.