There are 3 ways you can enroll pre-programmed OATH hardware tokens into Entra ID
- Use Entra ID Admin Portal
- Use SafeID Token Service
- Use Graph API
Using the Entra ID Admin Portal is only suitable if you only have a small number of hardware tokens to manage, as the enrollment process using the Entra ID Admin Portal is a manual process.
Using the Safe Token Service (STS) is highly recommended if you have a large number of hardware tokens to manage, as STS has a powerful management portal that allows administrators or the help desk team to assign, unassign, and reassign tokens in a few clicks. STS also has a self-service portal that allows users to self-enroll their tokens.
Using the Graph API is only suitable if all of your tokens will be self-enrolled by your users, as the Graph API does not allow administrators to assign or unassign tokens.