A financial services company wants to eliminate passwords for employees signing in to Microsoft Entra ID. They need a phishing-resistant authentication method that uses a physical hardware security key employees plug into their laptops, with no password entered at any point. Which authentication method should they deploy?