Hi William,
Yes the PIN length of CA Mobile OTP can be changed and set to whatever the requirement is, i have attached a document for that.
to Answer your second questions CA Advanced auth supports both ways of authentication which you are looking for, if you need to set it up you can refer the documentation or open the support case if you get into any issue.