You still the need the “what you are” or “what you know” to unlock the mobile token. In addition you can also ask for more as step up additional authentication

You still the need the “what you are” or “what you know” to unlock the mobile token. In addition you can also ask for more as step up additional authentication matters under access control policies.