In the DualShield Management Console, edit the logon procedure for your Cisco ASA application. Set the "One-Time Password" as the authentication method:
Select the Primary Authentication Server: AD
Select the Secondary Authentication Server: DualShield
AnyConnect Desktop Client
AnyConnect Mobile Client