We cannot make recommendations for other products. Identity solutions should be selected based on security requirements.
For CPPM UI, any MFA solution that's part of an existing login flow via SAML is supported. For TACACS+, any MFA solution that has a RADIUS agent component is supported.