OCRA Controller --------------- Most functions of the OCRA controller provide insight into the internals of the OCRA token, this is why the OCRA controller is also protected via authentication. Additionally the administrator or a system account needs to have a policy defined, to be able to access the OCRA functions. See :ref:`policy_ocra`. The only function, that can be accessed directly is the `ocra/check_t` function. See documentation for OcraController class: :py:class:`linotp.controllers.ocra.OcraController`