privacyIDEA is a self-hosted MFA platform for managing OTP, U2F/WebAuthn, and policy-based authentication workflows.