How to load these into Microsoft Entra (admin steps)
- Mint one token per staff member above, then Download Entra CSV.
- Entra admin center → Protection → Authentication methods → Hardware OATH tokens (Preview) → Add → upload the CSV.
- Each token shows Assign — assign it to the matching staff UPN.
- To activate: staff (or you on their behalf) open Security info → Add sign-in method → Hardware token, enter the serial number shown on its card here, then the live 6-digit code → Verify.
- The code on each card is the real OTP — it refreshes every interval. Click it to copy.
CSV columns match Entra exactly: upn,serial number,secret key,time interval,manufacturer,model. Secret keys are Base32 (160-bit), algorithm SHA-1 — the Entra hardware-OATH standard.