Can a single user have more than one token?
A single Active Directory user can have any number of tokens, including YubiKeys and OATH token records. Any one token can be used interchangeably with all the other ones, with the exception of offline laptop logons (see below)