In the policy of "MobileID/Tine-Based", there is a section called "OOBA-Push". First of all, you need to make sure that the option "Enable OOBA" is enabled. Commonly, you do not need to change the default settings of other options.
Enable OOBA (Out-of-Band Authentication)
...