...
- Implement passwordless or multifactor authentication with your favourite IdP (Shibboleth, SimpleSAMLphp, etc) through the W3C Webauthn standard
- Use Webauthn to secure access to SP implementations by registering authenticators as a local account (TOFU).