RSA MFA is "Enterprise" with all that implies, good, bad and neutral. If
that fits for you, fine; but if that doesn't sounds like your use case,
I would suggest looking elsewhere first.
(I have almost no experience with setting up or running MFA based on
anything *other* than RSA).
Discuss mailing list
This list provided by the League of Professional System Administrators