FIDO2 + SmartCard (PIV) functionality is the best hardware token for Entra ID and Active Directory
Are you looking for the best hardware token for Entra ID? You want something that has both FIDO2 and Smartcard functionality this allowes you to use Entra CBA as well as FIDO2 giving you passwordless access to everything.