Agreed this needs to be prioritised as a feature please Huntress, FIDO2 security keys like Yubi keys are phishing resistant whereas standard MFA with a six digit token is vulnerable to being captured by a phishing website along with a cookie for the website. It is then possible to import the cookie containing entered username, password and MFA code and be signed straight into the website without any username, password or MFA prompt.

I know this is a rather old thread but just wanted to chime in and say that I use M365 / Azure AD SSO to Huntress and use Yubikey for MFA on the M365 side, which could be what you're looking for. Doesn't help if you're not an MS shop I know, but might help some people who stumble across this thread.

You'll have the ability to do this directly in your IdP when they enable SSO.