When a user attempts to sign in to a computer that cannot communicate with its authentication service provider, the DualShield MFA server, then the computer enters the so-called Offline Login mode. 

First, the system administrator has to decide whether or not MFA is required for offline login. This option is in the System MFA Policy.

Edit the System MFA Policy and select the Offline tab

Toggle the option "Login MFA Enabled" to enable or disable MFA for offline login.

Set other options accordingly.

Next, you need to configure settings for tokens to be used for offline login. 

In the dashboard, select the Computer Logon token Management card

Click "Token Settings"