What’s the best way to configure Advanced MFA or Workstation MFA for employees?

Ash C

I’m exploring Advanced MFA and Workstation MFA to strengthen security for our organization. From what I’ve read, Advanced MFA can protect vault logins, SSO apps, VPNs, and even includes contextual policies like geofencing. Workstation MFA adds a second layer of authentication when employees log into Windows or macOS devices.

For those who have deployed these:

• How difficult was the setup process?
• Did users adapt quickly to workstation-level MFA?
• Any best practices for choosing authentication methods (Authenticator app, YubiKey, etc.)?

Trying to figure out the smoothest way to roll this out company-wide.