When your client connects NAB to your bank statement request, they will need to keep an eye on their mobile phone for a security code. That security code is delivered via the NAB app.

If you open the NAB app the security code is presented as below.

For reference, if your client logged into their bank directly the banks site may request a security code. As shown below, these security codes expire in 5 minutes from the time they are created.