Is it possible to selfassign a software token from an other (3rd party) portal then the selfservice portal.
So that a new user can order all he stuff in one portal (ps , gsm, token ,etc etc)
Yes it is possible, multiple ways.
You would need to do some investigation to find out what would work best for you.
AM Prime with an RSA Professional Services engagement, that may be customized to fit
your organizations needs...
RSA Admin SDK, you can write your own admin apps and integrate it any way you decide.
3rd party account and provisioning tools...
(you can search for many 3rd party guides here, look for keyword 'provisioning')
have varying depth with API functionality to do administrative
actions on user accounts, as well as hooks into other systems you own to manage users.
Some 3rd party Provisioning systems that integrate with SecurID are:
(note: this is not a complete list) Hitachi, IBM Tivoli, Intercede, Oracle Identity Manager,
SailPoint Identity IQ, Courion Account Courier...etc.
Retrieving data ...