Can each user have just one smart card/token that could be used on each workstation in the domain?
Yes. One USB token or smart card may be used to store user credentials required to access different machines and domains, as well as other applications, eliminating the need for multiple devices. You can also use the tokens or smart cards you already own, storing user details to access multiple applications, thus only the free portion of smart card/token memory is reserved for Dekart application data.