The 2-factor authentication was extended with WebAuthn/FIDO2. You can manage AD LDS users and groups (LAM Pro).