In the privacyIDEA youtube channel, you can see a new video about the new U2F Features in the latest release 2.8.
This way you can add two factor authentication with cheap and easy to use U2F devices to your network. You can implement the SAML IdP using simpleSAMLphp and the privacyIDEA plugin.