The Windows 10 based MFA technology Microsoft initially called Passport was rebranded to merge with Windows Hello. Under the covers this is a virtual smart card provisioned either by Azure AD's Device Registration Service or your AD-CS. Logons from that Win10 device require a PIN or other Hello gesture (something you know or are), plus the virtual smart card (something you have). When combined with other MS technologies, you can leverage this device-based MFA further.