On windows there is Windows Hallo with support for bio-metrics/pin/yubikey/smartphone app. Even if it's not a 1:1 alternative Im looking for something similar.
Is there any way to set up multi-factor authentication for Linux login (not ssh, local login) with support for using sudo etc to remove the need for entering a password?
Obviously fallback to password is acceptable. Usage of cloud services is OK as long as it's from a reputable and vendor.
Not for use at enterprise scale, just for a single workstation. Maybe yubikey is the only valid alternative with PAM? Would prefer using the smartphone for authentication since it's something i already have with me everywhere.