Is it possible for a Defender user to get prompted to create a PIN for a Defender token during the first use of the token?
To accomplish this, configure the PIN on the user's token, and check the "Expire" checkbox.
When the Defender user logs in for the first time with their new (but expired) PIN, they will be notified that they must change it.
The format will be 'expired PIN' followed by 'new PIN' and then confirmed with 'new PIN'.
For example, if the old PIN was 1234 and the new PIN is 5678, the format to update this expired PIN will be 123456785678.