Report errors or omissions

 

Assign hardware tokens

You can assign a hardware token to a user once the token seed file has been imported into your Identity as a Service account. A hardware token can only be assigned to one user at a time. A user can have multiple hardware tokens. Once all users have been assigned their hardware tokens, modify your resource rules as required so that users can authenticate to their application accounts using hardware tokens.

There are two ways to assign a hardware token to a user.

An administrator assigns unassigned tokens to users using one of these procedures:

Assign hardware tokens from the Tokens pageAssign hardware tokens from the Tokens page

Assign hardware token from  Tokens page

Click > Resources > Tokens. The Tokens page appears.

Click Unassigned. The list of unassigned hardware tokens appears.

Identify the serial number of the token you want to assign to your user. You can use the filter option to search for a particular token (see Manage hardware tokens).

Click for the hardware token you want to assign to a user. The Assign Hardware Token dialog box appears.

In the User ID field enter the user's Identity as a Service user ID.

Click Assign. The user is assigned the token and can now use it to complete second-factor authentication.

Click Assigned. The token appears in the Assigned list.

Assign hardware tokens from the Authenticators pageAssign hardware tokens from the Authenticators page

Assign tokens from the Authenticator page

Click > Members > Users. The User List page appears.

Click the user ID of the user being assigned the hardware token. The User Details page appears.

Click the Authenticators tab. The user's list of assigned authenticators appears.

Click . A drop-down list of authenticators appears.

Select Hardware Token. The Assign Hardware Token dialog box appears.

In the Token Serial Number field, enter the hardware token serial number.

Click Assign. The authenticator is assigned to the user.

Assign hardware tokens in bulk. See Bulk assign authenticators.

 –or–

Send the hardware token and serial number to the user and have them self-assign the token. See the Identity as a Service User Online Help for more information on self-assigning hardware tokens.

Note: Before you begin, upload the token data file to your Identity as a Service account. See Import hardware tokens  for more information.

Edit group membership

If you need to change the group membership for a hardware token before assigning it to a user, do the following:

Click > Resources >Tokens. The Tokens page appears.

Click next to the hardware token. The Edit Token dialog box appears.

Add or delete groups as required.

Click Submit.