We finally have the support in Workspace ONE Access for the FIDO2 hardware access tokens. It is pretty easy to set it up and use. No major roadblocks, if you have a hardware key you can test it by yourself.