> I might also add that Okta DOES NOT support any form of physical 2FA (e.g.: yubikeys), only software-based ones. Not sure where you got this from, but we've

> I might also add that Okta DOES NOT support any form of physical 2FA (e.g.: yubikeys), only software-based ones. Not sure where you got this from, but we've been using yubikeys for a few months now. They even allow policies to only allow physical 2FA methods.