These instructions apply to Nitrokey 3 too: docs.nitrokey.com/fido2/ It works for Linux logins too. No experience with sssd.
Fill in the blank.