I know this is a rather old thread but just wanted to chime in and say that I use M365 / Azure AD SSO to Huntress and use Yubikey for MFA on the M365 side, which could be what you're looking for. Doesn't help if you're not an MS shop I know, but might help some people who stumble across this thread.