Authentication responses through 

BlackBerry UEM

  

In all the responses shown, the user confirms the authentication prompt on their device, and the response travels back to 

BlackBerry Enterprise Identity

 or the 

BlackBerry 2FA

 server. The user's directory password is verified if the authentication options for the user require it. After it is verified, the user receives a message on their device that the prompt response was sent successfully.

The diagram does not show the data flow of authentications using one-time password (OTP) tokens.