yubik

With privacyIDEA 3.8 you can use the Yubikey for Smartcard domain Login.
A generic token enrollment at any application without the need for the user to go to the selfservice portal.