@PaulKelly1 (Customer)​ ,

We have the Authentication Manager Bulk Admin Tool (AMBA) that allows you to complete tasks in bulk. For example:

• The Delete Token command (DT) deletes the record of an unassigned token from the database, but do not have a command to delete tokens based on a policy of not being used in a defined amount of time.
• The Rescind Token (RT) command unassigns the specified token. No other action regarding this token or the associated user is performed.
• The Unassign Token (UT) command unassigns token(s) from a user, with some exceptions. If the user has no other tokens, this function also deletes the user record. This function does not work if the user is an administrator, is not enabled on the agent, is not part of a group or has no extension fields.

For additional functionality that our Professional Services team can provide, please contact your RSA account representative to discuss such options.