Once you receive the ExtraPin token you have to use it within 2 minutes. After its validation, the ExtraPin is valid until session expiration. If the ExtraPin token is not used on time or the current session expires (which forces a new login), you have to perform another request to generate a new ExtraPin token.