MFA and Windows10 in a Hybrid Azure AD Environment

We're rolling out a hybrid azure AD environment - and the goal (handed down) - is to implement MFA for all non-privileged accounts. We have a good deal of short term temps (its a call center) - and there's no guarantee that they have a modern cell phone (and they lose keycards on a daily basis).

Any suggestions for MFA?

Call MFA a domain joined PC and a password?

Implement Yubikey where you leave the key in the machine?

We …

ad azure azure ad cybersecurity environment hybrid mfa