I was asked by my work to look into using Yubikeys for AD FS multi-factor authentication. I found out that Yubico provides free OTP validations from their YubiCloud services so it seemed like a good alternative to using RSA SecurID OTP. I did
a search but couldn't find any Yubikey MfA plug-ins for AD FS so I
decided to write one using the MfA examples found on the net.
I am asking if anyone is using Yubikey for AD FS MfA because I have to figure out how to handle enrollment for each users individual Yubikey Public Token IDs. I would prefer to not have to write this piece too but will if I must.