Verify a one-time password code generated by a Yubikey with the Yubico validation API endpoint.
Yubico
Nate Adams at Sophos
How it works
Import this story to your tenant, from where you can adapt it to meet your unique needs.