You can assign a hardware token to a user once the token seed file has been imported into your Identity as a Service account. A hardware token can only be assigned to one user at a time. A user can have multiple hardware tokens. Once all users have been assigned their hardware tokens, modify your resource rules as required so that users can authenticate to their application accounts using hardware tokens.
There are two ways to assign a hardware token to a user.
An administrator assigns unassigned tokens to users using one of these procedures:
Assign hardware tokens from the Tokens pageAssign hardware tokens from the Tokens page
Assign hardware token from Tokens page
Click
> Resources > Tokens.
The Tokens page appears.
Click Unassigned. The list of unassigned hardware tokens appears.
Identify the serial number of the token you want to assign to your user. You can use the filter option to search for a particular token (see Manage hardware tokens).
Click
for the hardware token you want to assign to
a user. The Assign Hardware Token dialog
box appears.
In the User ID field enter the user's Identity as a Service user ID.
Click Assign. The user is assigned the token and can now use it to complete second-factor authentication.
Click Assigned. The token appears in the Assigned list.
Assign tokens from the Authenticator page
Click
> Members > Users.
The User List page appears.
Click the user ID of the user being assigned the hardware token. The User Details page appears.
Click the Authenticators tab. The user's list of assigned authenticators appears.
Click
. A drop-down list of authenticators
appears.
Select Hardware Token. The Assign Hardware Token dialog box appears.
In the Token Serial Number field, enter the hardware token serial number.
Click Assign. The authenticator is assigned to the user.
Assign hardware tokens in bulk. See Bulk assign authenticators.
–or–
Send the hardware token and serial number to the user and have them self-assign the token. See the Identity as a Service User Online Help for more information on self-assigning hardware tokens.
Note: Before you begin, upload the token data file to your Identity as a Service account. See Import hardware tokens for more information.
If you need to change the group membership for a hardware token before assigning it to a user, do the following:
Click
> Resources >Tokens. The Tokens page appears.
Click
next to the hardware token. The Edit Token dialog box appears.
Add or delete groups as required.
Click Submit.