Customized page - how to deal with wrong logon

Does anyone know how to reorder the logon fields when requireing the end user to enter both Domain and RSA credentials. Currently the end users enter their Domain User ID first, then their RSA Passcode (PIN and OTP off of the Key Fob), and then their Domain password. Because the RSA OTP changes every 60 seconds the users tend to have a hard time getting their Domain password entered in before the RSA number on the key fob expires. You would think this would not be a big deal, but it is for the non technical users.

 

 

What we would like to be able to do is have them enter their static domain credentials first, and then enter the RSA Passcode. We are having a hard time figuring out where and how to do this.

 

Thanks

 

Bill