Yes, one-time tokens expire 10 minutes after the request is made. If the token expires before it is used to successfully log into the Secure Website, users must request a new token. Tokens that expire and are not used to successfully log in do not count towards the limit of three allowable consecutive one-time token uses.
Refer to Multi-Factor Authentication for additional information.
Answer ID
8000-17