To use the One-Time Password authentication, user must have a OTP token. DualShield supports and provides both hardware and software tokens which includes: SafeID, MobileID and GoogleAuthenticator.

Set the Windows Logon step as: One-Time Password

Logon the Mac screen, enter the username and password and enter the OTP which is generated from your OTP token.