From the Defender OU, go to the Defender Menu | About... | Token Licenses. The allocation column shows the used/total. Soft token licenses are not related to user licenses.
As unassigned tokens still consume a license, these should be deleted. See ""How to delete unassigned soft tokens" section in the KB
More information on Defender licensing is here:
Note this issue may also occur if the Defender Administration Console version is an older version than the Defender Security Server installation. It is expected that the installations of any workstation Defender Admin Consoles are upgraded at the same time as the Defender Security Server to match.