A password proves what someone knows. A passkey proves what they hold. LFA is an authenticator app that proves where they are: at the moment they sign in, approve, or move money. Hardware-signed. VPNs can stay on.
The Location Factor Authenticator plugs into the login systems you already run (Okta and the like) over standard OIDC. Your systems then challenge the device two ways: silently, answered in the background while the person works, or attended, where they stop and tap Confirm my location in the app. Either way the location never leaves the phone: your systems receive a signed yes or no, verifiable offline with the open-source verifier.