Multi-factor Authentication for Bots

Hello Forum Members,

What are your recommendations to meet multi-factor authentication requirements for bots in AD? It must meet FIPS and NIST requirements. We are researching Luna HSM for the certificate with CyberArk or another encrypted store for the “PIN” or Thycotic to start. We would prefer a solution that does not require additional hardware and is not too costly. Any help would be most appreciated. Thank you in advance!