It uses a SAML plugin in Jenkins and then we use our mobile phones as a hardware key but if you have a YubiKey with NFC / USB-C mobile compatible you could use that in addition, so it becomes MFA.
We disabled the SMS version but saaspass does allow you to configure which authentication options you want enabled.
We have implemented https://saaspass.com/.
It uses a SAML plugin in Jenkins and then we use our mobile phones as a hardware key but if you have a YubiKey with NFC / USB-C mobile compatible you could use that in addition, so it becomes MFA.
We disabled the SMS version but saaspass does allow you to configure which authentication options you want enabled.