> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Manage soft token authenticators

## Available soft token authenticators

The following soft token authenticators are available on IDaaS:

- **Entrust Soft Token.** Entrust Soft Token (ST) is an authenticator for Entrust platforms. When assigned in IDaaS, users must provide a challenge response generated by the Entrust ST application. Users on connected mobile devices can also use Push Notification, which prompts authentication automatically in the app.

- **SDK Soft Token.** A custom mobile soft token app that generates a one-time password (OTP) to allow users to access applications.

- **Legacy Token.** A custom mobile soft token app that generates a one-time password (OTP) to allow users to access applications.

- **Google Authenticator.** A soft token app that generates one-time passwords (OTP) for application access. The default display name is **Google Authenticator**, but you can change it in [Customize email templates](/docs/notifications-and-email/customize-email-templates.md). The updated name appears throughout IDaaS, including in [Modify Google authenticator settings](/docs/authentication-and-security/manage-authenticators/manage-soft-token-authenticators/modify-google-authenticator-settings.md).

## About soft token authenticators

Users can have multiple soft tokens. For example, users with multiple mobile devices can add a soft token to each device.

Administrators can assign soft tokens to users using the following methods:

- Automatically assign a soft token. If the user has an email address, the user receives an email with instructions to activate their Entrust ST token. For more information, see [Manage General settings](/docs/authentication-and-security/manage-authenticators/manage-general-settings.md).
- Add a soft token to a user's profile.

Users can also add soft tokens to their accounts.

note

Before assigning soft token authenticators to users, review the authenticator settings and update them as needed. For more information, see [Modify Entrust Soft Token (ST) authenticator settings](/docs/authentication-and-security/manage-authenticators/manage-soft-token-authenticators/modify-entrust-st-authenticator-settings.md).

## Topics in this section

[📄️Settings Review the Entrust Soft Token authenticator settings, and edit them as required. Changes made to these settings apply to all assigned Entrust Soft Tokens in your account.](/docs/authentication-and-security/manage-authenticators/manage-soft-token-authenticators/modify-entrust-st-authenticator-settings.md)

[📄️Assign and activate tokens Use this procedure to assign Entrust Soft Tokens to users and activate them when needed.](/docs/authentication-and-security/manage-authenticators/manage-soft-token-authenticators/assign-and-activate-entrust-st-tokens.md)

[📄️Unlock Entrust Soft Token If an end user enters an incorrect PIN for an Entrust Soft Token in the Entrust Soft Token app too many times, that token is locked in the app. This procedure describes the administrator-managed unlock flow. The administrator uses the PIN Unlock action to generate an Unlock code, then shares it with the end user. The end user enters the Unlock code in the app and sets a new PIN for that token.](/docs/authentication-and-security/manage-authenticators/manage-soft-token-authenticators/unlock-an-entrust-st-app.md)

[📄️Google Authenticator settings Use this procedure to review and update Google Authenticator policy settings in IDaaS.](/docs/authentication-and-security/manage-authenticators/manage-soft-token-authenticators/modify-google-authenticator-settings.md)

[📄️Activate Google Authenticator Use this procedure to assign and activate Google Authenticator for a user. Before you begin, ensure the user has access to a mobile device with a Google Authenticator application installed.](/docs/authentication-and-security/manage-authenticators/manage-soft-token-authenticators/activate-a-google-authenticator.md)

[📄️Synchronize an authenticator If a user cannot authenticate with a soft token, there might be clock drift between the user's mobile device and IDaaS. Use Synchronize to realign the token. Before you begin, ask the user to confirm that the mobile device clock and carrier time are synchronized.](/docs/authentication-and-security/manage-authenticators/manage-soft-token-authenticators/synchronize-a-soft-token-authenticator.md)

[📄️Manage tokens Use this procedure to enable, disable, view, or delete Entrust Soft Token and Google authenticators. You can also review details such as creation date, last used date, state, type, and push support.](/docs/authentication-and-security/manage-authenticators/manage-soft-token-authenticators/manage-soft-tokens.md)

[📄️Edit a label Use this procedure to update a soft token label in IDaaS. Updating labels is useful when users have multiple soft tokens, because labels are easier to recognize than serial numbers. For example, labels such as My Phone and My Tablet are easier to identify quickly.](/docs/authentication-and-security/manage-authenticators/manage-soft-token-authenticators/edit-a-token-label.md)

[📄️SDKs Use this procedure to configure a custom soft token SDK in IDaaS. After you configure SDK credentials, you can add custom push messages.](/docs/authentication-and-security/manage-authenticators/manage-soft-token-authenticators/manage-soft-token-sdks.md)