An organization wants to improve the company's security authentication method for remote employees. Given the following requirements: • Must work across SaaS and internal network applications • Must be device manufacturer agnostic • Must have offline capabilities Which of the following would be the most appropriate authentication method?

Time-based tokens are the most appropriate choice because they meet all specified requirements. They generate a unique, time-sensitive code that can be used across various applications (SaaS and internal) and devices, fulfilling the agnostic and cross-application requirements. Crucially, they do not require a live network connection to generate the token, thus providing offline capabilities. Username and password alone offer weak security and lack offline capabilities for two-factor authentication (2FA). Biometrics are device-dependent and often require specific hardware, failing the device-agnostic requirement. SMS verification relies on network connectivity to receive the code, making it unsuitable for offline use.