Hi, we are looking to see if we can bulk remove Soft tokens from users as we are setting up a policy that if you haven't used your token in over 180 days it will be removed from you.

2 years ago

We have the Authentication Manager Bulk Admin Tool (AMBA) that allows you to complete tasks in bulk. For example:

The Delete Token command (DT) deletes the record of an unassigned token from the database, but do not have a command to delete tokens based on a policy of not being used in a defined amount of time.
The Rescind Token (RT) command unassigns the specified token. No other action regarding this token or the associated user is performed.
The Unassign Token (UT) command unassigns token(s) from a user, with some exceptions. If the user has no other tokens, this function also deletes the user record. This function does not work if the user is an administrator, is not enabled on the agent, is not part of a group or has no extension fields.

For additional functionality that our Professional Services team can provide, please contact your RSA account representative to discuss such options.

Salesforce MFA Enforcement – Action Required