2FA Solution for Windows Active Directory ?

Hi, I’m looking for a two-factor authentication solution for AD. We’re trying Duo (https://duo.com/) and UserLock (https://www.isdecisions.com/products/userlock/) at the moment. Do you have any other suggestions? Or any experience with one of the two solutions we’re trying?