Azure API Management

I have the Microsoft authenticators as a fallback so like devices where I have to do digitally signing anything I use my ubkey. For Google that is one of my fallbacks is I do have the ability to use the TOTP but only in Western Canada and if I'm overseas I can't it's not an ability for me. The rate limiting stuff and ever we did a show years ago on the Azure API management I mean did you recommend tools like that what's the right way to deal?