Add Yubikey / FIDO support to AzureAD provider

[sammcj]

AzureAD now supports hardware keys and works with Yubikey compatible devices.

saml2aws needs to be updated to allow users to specify Yubikey/FIDO as a login option.

[mapkon]

Would you be willing to work on this?

[seppestas]

Looks like a duplicate of #1254. AzureAD is now known as EntraID to make everyone's lives just that little bit more difficult.