...

• enforce two-factor authentication with clients having to provide a certificate and a password,
• allow single-factor authentication using a certificate instead of user account/password.
  
  

FIDO Authentication

The FIDO protocol family can be used for authentication, see JS7 - FIDO Identity Service.

• FIDO2 and Passkeys can be used as a first or second factor for authentication in MFA.
• FIDO U2F can be used as a second factor for authentication in MFA.
  
  

Image Added

Further Resources

...