Winbox log in to mikrotik router with Notkay as second factor

Connection is made to old RB2011LS Mikrotik router with Radius authentication on. Notakey proxies all requests from the mikrotik router to the radius server and in addition asks approval (signature) on the users mobile phone. In this case Radius server is connected to Microsoft AD and user is taken from there.