Yes, customer consent and additional authentication (AFA) is required for saving a card / creating a token.