Does COS offer partner users (external users) dual control for payment requests"?
Unfortunately, COS does not offer this feature to partners at this time. The only activities with dual control enforcement for partner users are around admin functions, such as adding a new user or editing an existing user.

What is the expiration for authentication tokens?
24 hours