Managing Imported Tokens
Find the recorded Token2 actions for assigning, activating, unassigning and deleting imported tokens, including the handling notes for lost or stolen devices.
Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
Assigning a Token
Assigning a token is as simple as clicking the Assign button.
- Search for the user in the popup. All Azure users are available for selection.
Screenshot retained for review
- Once the token is assigned to a user it is also visible in the Azure OATH Tokens (Preview) blade.
Screenshot retained for review
Activating a Token
To Activate a token, press the Activate button. You have 2 options.
- Enter the activation code that is displayed on the token. You obviously need the token in your hands to do this.
- Or if you don't have the physical token you can generate the Activation code by entering the Secret key associated with the physical token (which you should have if you saved the .csv file or added to Bitwarden).
Screenshot retained for review
- The Token is now activated and the user can use it for any Microsoft MFA.
Screenshot retained for review
Lost or Stolen Tokens
Lost and stolen tokens need to be, as a minimum, Unassigned asap. This will prevent anyone from using the token to perform MFA against the user account assigned to the token.
The source distinguishes immediate unassignment from later deletion, suggesting a short wait in case a lost token is recovered. It does not define an approved deletion timeframe.
If a token is deleted and later found it can always be re-imported.