System and method for provisioning a security token

A system capable of creating associations between user identities and physical token identifiers, the system comprising:

• a server system comprising a processor and a memory, the server system comprising a data store that stores identity credentials of users;
• and
• a security application configured to run on a client device of a user whose identity credentials are stored in the data store, the security application comprising executable code that directs the client device to extract a token identifier from a physical token;
• wherein the server system is configured to create an association in the data store between a user identity of a user and the token identifier by a process that comprises:
• authenticating the user prior to creation of the association between the user identify and the token identifier, wherein authenticating the user comprises receiving, over a network from the client device, and validating, user identity credentials that do not include the token identifier;
• after authenticating the user, transmitting, over the network to the client device, instructions that cause the client device, under control of the security application, to extract the token identifier from the physical token and to send the extracted token identifier to the server system, whereby the server system obtains the token identifier without manual user entry of the token identifier;
• and
• updating the data store to associate the received token identifier with the user identity.