The MobileID app is an OTP app as well as an OOBA app. If a token is to be used for OOBA, then while the token is being installed, it must also be registered for OOBA operation.
Please note: Your_Dualshield_FQDN:8074 must be accessible from the outside in order for the token to register for OOBA services.
There are several ways of installing a MobileID token. However, in order to register a token for OOBA, you must install the token by QR code or by link.
...