The user will be prompted to enter their PIN.  This is the 'something they know'.

The will encrypted by the server's public key stored in the WiKID token  and sent to your WiKID server.  (Along with a one-time use AES key.)

Next:  The one-time passcode