Set up Deployment Service

Configure Policy Settings

Configure Logon Procedure

To allow users to use Mobile Push Authentication, you need to include "Out of Band Authentication - Push"