To deploy a soft token to user simply head over to the Active Directory Section and find the user you want to assign a soft token to:
In the Manage Soft Token section click the + and select which type of soft token you wish to deploy:
Once the soft token is deployed the user will get an email with instructions for install and a QR code to link the soft token to their identity (example below)