Fedora 39 ships the updates Network Manager open connect by default, which means MFA works now. This is a big deal for me, frees me from fucking Cisco proprietary crap which also meant being forced into a debian based distro.