The MobileID app is an OTP app as well as an OOBA app. If a token is to be used for OOBA, then while the token is being installed, it must also be registered for OOBA operation.
Please note: 'Your_Dualshield_FQDN:8074' must be accessible from the outside in order for the token to register for OOBA services.
...