i'd like to remark that this ticket is supposed to be about perhaps u2f or other direct hardware security, not saml, and thus i've had to unsubscribe from the recent back and forth :)

It's also worth noting that newer yubi keys have a u2f support that doesn't require third party server integration. Which may be more palatable?