What is the format for entering the password and security token in a Salesforce Connection Manager?

You just append the security token after your password without a + sign.

See the Quick Start located here for an example of setting the connection: