Mobile Push Authentication requires the DualShield Deployment Service (DDS) to be accessible from the public network. DDS is used to deploy the MobileID app and register the app for push authentication.