[baybal2]

We still use smartcards within the company for everything. Either standard plastic for admin access, and USB dongles for regular employees which they take home.

An "Insert the dongle" popup is instantly understandable, and we never had any problem with employees learning how to use them. Windows, Linux, Macs all eat GIDS smartcards without an issue, no extra drivers needed. Works across well web access, ssh, SASL, kerberos.

And now those people want us to move to FIDO keys, which come with each new version, one more problem, and don't work with anything, but Google stack.

You can even setup your office access control on the same smartcards.