There are 2 ways you can set up pre-programmed hardware tokens with Azure AD:
- Use Azure AD Entra ID Portal
- Use SafeID Token Service
...
Entra ID Portal
Microsoft Aure AD portal does provide a Entra ID portal provides a basic facility that allows you to enroll the pre-programmed hardware tokens. To set up hardware tokens using Azure AD the Entra ID portal, you will need to go through 3 steps
- Download the token secret file
- Assign tokens to users
- Upload tokens to Azure ADEntra ID
- Activate Tokenstokens in Entra ID
Step 1: Download the Token Secret File
| Expand | ||||||
|---|---|---|---|---|---|---|
|
Step 2: Assign tokens to users
Once you have downloaded In step 1, you will need to edit the secret file of the hardware tokens your tokens, you now need to edit it with a text editor and assign all of your tokens to your users by adding the user's UPN against the token's serial number, one by one
Step 3: Upload tokens to Entra ID
NextIn step 2, you will need to upload the modified secret file of the hardware tokens onto Azure AD
on to Entra ID
Step 4: Activate tokens in Entra ID
FinallyIn step 3, you will need to activate tokens by providing a verification code from the token, one by one.
...
Click here for detailed instructions on how to set up pre-programmed hardware tokens with Azure AD
SafeID Token Service
As you will see, the facility provided by Azure AD is very basic and not flexible. It does not provide functions for you to quickly assign only one token to a user or to reassign a token, for instance. If you have a small number of hardware tokens to manage, then it is OK to use the Azure AD portal. However, if you have a large number of hardware tokens to manage, then we would recommend the SafeID Token Service
...