Enable derived credentials
On the Trust page, click On enrolled mobile devices, open this application in the built-in browser (required for derived credentials) to use derived credentials on enrolled mobile devices to authenticate with this application.
Derived credentials allow mobile devices to be used for secure mobile access to applications, websites and services that require smart card authentication. If it is enabled on your system you can configure the application so that it requires derived credentials to access the application.
For more information, see CyberArk-issued derived credentials.