There are 2 ways you can enroll SafeID hardware OTP tokens in Azure AD
- Use Azure AD Portal and PowerShell script
- Use SafeID Token Service
If you have a small number of hardware tokens to manage, then you can the Azure AD portal. However, if you have a large number of hardware tokens to manage, then you are recommended to use the SafeID Token Service.
Use Azure AD Portal
Enrolling an OTP token into Azure AD involves Azure AD portal provides a very basic facility that allows you to enroll and manage tokens. The enrollment process is manual and takes 3 steps:
- Assign tokens to users
- Upload tokens Upload the token to Azure ADAssign the token to a user
- Activate the token tokens
Furthermore, Azure AD portal provides a very basic facility that allows you to assign & upload tokens in bulk, but it does not provide a facility for activating tokens in bulk. We have to write a PowerShell script for bulk activation.
| Children Display |
|---|
If you have a large number of SafeID tokens to manage, then you might want to use the SafeID Token Service.
Use SafeID Token Service
SafeID Token Service (STS) is a product/service that we have developed for customers who need to manage a large quantity of SafeID tokens with Azure AD.
...
For more details, click SafeID Token Service