> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Bulk assign authenticators

Use this procedure to assign Entrust Soft Token (ST), Google authenticators, grid cards, hardware tokens, or passwords to multiple users on your Identity as a Service account. When performing a bulk assign soft token operation, the following occurs:

- Users with an existing ACTIVE or INACTIVE version of the authenticator are not assigned new ones.
- Users with soft tokens with an ACTIVATING status are assigned a new version of that token.
- Entrust Soft Tokens and Google authenticators are assigned in an ACTIVATING state. Users must activate their tokens.
- When bulk assigning grid cards, note the following:
  - Grid cards are assigned in a PENDING state. The first time the user successfully authenticates with the grid card, the card state changes to ACTIVE.
  - If the CSV file contains just a `userId` column, the bulk operation generates and assigns a grid card to each user in the file.
  - If a `Serial Number` (or `serialNumber`) is blank or the header does not exist, the card is generated as an unassigned card.
  - If a user is listed multiple times in the CSV file, the bulk assign operation assigns the user multiple grid cards until the maximum grid card per user setting is reached.
  - If a user does not exist in Identity as a Service, then the row fails to be processed and is skipped and the bulk operation continues to process the remaining rows in the file.
- When bulk assigning hardware tokens, note the following:
  - Hardware tokens are assigned in an ACTIVE state.
  - The CSV file requires both a `serialNumber` and a `userId` header.

## CSV file format requirements

The header row in your CSV file contains only one column with userId as the value.

The following is a sample CSV file to help you get started:

```csv
userId
user1
user2
user3
user4
```

tip

You can export a user list from the **Users List** page to use for bulk assign authenticators operation. Select the **User ID** as the only attribute to include in the file. See [View, search, and export user list](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/view-filter-and-export-user-list.md).

The following is a sample CSV file for bulk grid card assignment and hardware token authenticators with a Serial Number header:

```csv
userId,serialNumber
user1,1234567
user2,2345678
user3,3456789
user4,1235679
```

Download a sample file with a userId column heading: [AssignAuthenticators.csv](/assets/files/AssignAuthenticators-a08067d9ccc28db01bd77da164983f95.csv/)

Download a sample file with both userId and serialNumber column headings: [AssignSerialNumberAuthenticators.csv](/assets/files/AssignAuthenticatorswithSerialNumber-da7717f0ce10ad4e115f909d2b9c8331.csv/)

## Assign authenticators attributes

The following table summarizes supported Identity as a Service assign authenticators attributes.

**Table: Bulk assign authenticators**

| Attribute | Header Value | Required | Description                      |
| --------- | ------------ | -------- | -------------------------------- |
| User ID   | `userId`     | Yes      | This is the user ID of the user. |

**Table: Bulk assign grid card authenticators with a serial number**

| Attribute     | Header Value                        | Required | Description                                             |
| ------------- | ----------------------------------- | -------- | ------------------------------------------------------- |
| User ID       | `userId`                            | Yes      | This is the user ID of the user.                        |
| Serial Number | `Serial Number` (or `serialNumber`) | No       | The serial number of an existing, unassigned grid card. |

**Table: Bulk assign hardware token authenticators with a serial number**

| Attribute     | Header Value                        | Required | Description                                                  |
| ------------- | ----------------------------------- | -------- | ------------------------------------------------------------ |
| User ID       | `userId`                            | Yes      | This is the user ID of the user.                             |
| Serial Number | `Serial Number` (or `serialNumber`) | Yes      | The serial number of an existing, unassigned hardware token. |

Once the bulk assign is complete, the authenticators are automatically assigned to the users.

## Assign authenticators in bulk

How to assign authenticators in bulkHow to assign authenticators in bulk

1. Click Menu icon **>** **Bulk Operations**. The **Bulk Operations** page appears.
2. Click Circle Plus icon. The **Add Bulk Operation** page appears.
3. From the **Operations** drop-down list, select the authenticator type. The options include:
   - Entrust Soft Tokens
   - Google Authenticators
   - Grid Cards
   - Hardware Tokens
   - Passwords
4. From the **Actions** drop-down list, select **Assign**.
5. If you select **Passwords** from the **Operations** list, optionally, select **Change is Required on Next Usage** to automatically prompt each user to change their password the first time it is used.
6. Set the **Maximum Number of Retries** to the number of retries the bulk operation can attempt if the bulk import is not immediately successful. The default value is 5. This setting prevents an endless number of retry attempt if the operation fails.
7. Enter a unique **Name** that identifies the operation in the **Bulk Operations List** page.
8. Enter a **Description** so that other users can understand the purpose of the operation.
9. Optional. Copy or download the same bulk file and modify it as required. (Available for hardware tokens only).
10. Click **Initiate and Upload**.
11. The **Start/Stop** dialog box appears.
12. Click **Start**. When the upload completes, a **Finished** prompt appears.
13. Click **Finished**. You are returned to the **Bulk Operations List** page. Your bulk operation appears in the list. You can verify the status of the bulk operation.
14. To see a summary of the upload, click Play icon to view the details of the bulk operation, including any error information.
15. Click Refresh CW icon in the **Refresh** column to refresh the status of a bulk operation. This option appears only when a refresh is available.
16. The authenticator you selected for this operation is assigned to those who did not already have one. If Entrust ST or Google authenticators are assigned, users receive an email with instructions to configure the authenticator for use. If passwords are assigned, users receive an email with their new password.