If it's the IT managed computer login then you couldn't use a password manager for it, right?

I think this is more the realm of using windows hello or apple touchid (AFAIK no good, simple, standard built-in way exists for linux distros) to get the first OS login and then you can use your password manager when you are logged into the OS.

Hardware MFA is available for logins, including Linux.

ok fine, two passwords then