The privacyIDEA installation on a Univention Corporate Server is used to authenticate with OTP at local login and SSH.
The local users are added to the realm and the user root is enrolled a token. Thus you can add a second factor to log in to your Univention Corporate Server.
source