You should have received a link in the formhttps://…/t/<secret> from the APCI. Open it on the device where you hold your authenticator app.

If the link has expired or been revoked, request a new one. Tokens are short-lived and every access is audit-logged.