Administrators will soon need Phish Resitstant MFA which uses Passkey Authentication.

We have some remote staff in another country which cannot register their phones due to being in another country however they use VPN on their laptops

Tunnelbear give you a free 2gb VPN which should be enough to register passkeys