Skip to main content

Assign hardware tokens

You can assign a hardware token to a user after the token seed file is imported into your IDaaS account. A hardware token can be assigned to only one user at a time, but a user can have multiple hardware tokens. After users are assigned hardware tokens, update your resource rules as required so they can authenticate to their application accounts using hardware tokens. You can assign tokens to users, or users can self-assign them after you send the tokens to them.

Assign hardware tokens to users

Hardware tokens can be assigned to users as follows:

Assign hardware tokens from the Tokens page

  1. Click > Resources > Tokens. The Tokens page appears.
  2. Click Unassigned. The list of unassigned hardware tokens appears.
  3. Identify the serial number of the token you want to assign to your user. You can use the filter option to search for a token (see Manage hardware tokens for more information on filtering tokens).
  4. Click for the hardware token you want to assign to a user. The Assign Hardware Token dialog box appears.
  5. In the User ID field enter the user's IDaaS user ID.
  6. Click Assign. The user is assigned the token and can now use it to complete second-factor authentication.
  7. Click Assigned. The token appears in the Assigned list.

Assign hardware tokens from the Authenticators page

  1. Click > Members > Users. The User List page appears.
  2. Click the user ID of the user being assigned the hardware token. The User Details page appears.
  3. Click the Authenticators tab. The user's list of assigned authenticators appears.
  4. Click . A drop-down list of authenticators appears.
  5. Select Hardware Token. The Assign Hardware Token dialog box appears.
  6. In the Token Serial Number field, enter the hardware token serial number.
  7. Click Assign. The authenticator is assigned to the user.

Assign hardware tokens in bulk

See Bulk assign authenticators.

User self-assigns hardware token

The administrator can have the user self-assign the hardware token. To do this:

Send the hardware token and serial number to the user and have them self-assign the token.

note

Before you begin, upload the token data file to your IDaaS account. See Import hardware tokens for more information.

Edit group membership

If you need to change the group membership for a hardware token before assigning it to a user, do the following:

  1. Click > Resources >Tokens. The Tokens page appears.
  2. Click next to the hardware token. The Edit Token dialog box appears.
  3. Add or delete groups as required.
  4. Click Submit.