At logon, the user is asked to enter a Challenge Code provided by the service application, and the user will use the MobileID to generate a Response Code and enter it to authenticate the user to that service. Challenge-Response authentication provides additional security to the simple OTP authentication.

The purpose of the section "Challenge & Response" is to allow the system administrator to determine if the challenge & response feature is to be enabled.