Token usage with iDM

Hello
Barring the use of QR codes, does any know if there is a physical token that would be natively compatible with iDM for MFA requirements?

 Where I work, we use RHEL7.X and have a separate server running iDM for ldap functionality. I have been instructed to start working towards MFA for all users and would prefer to keep it simple. Does anyone have experience using something like a keyfob or card (obviously every workstation would have to have a USB card reader) with the iDM software to meet MFA requirements where they work?