Proof of the possession of a physical or software token in combination with some memorized secret knowledge.
Sources:
NIST SP 800-175A
under two-factor authentication