This is an interesting one. I have a customer using yubikey for authc against ASA via AnyConnect, with extraction of UPN for authz via ISE/AD with no issues. Not sure if it directly relates to your issue, but have you ensured you have the right drivers etc?