Temporary Access Pass (TAP) in Microsoft Entra

1 – What is Temporary Access Pass (TAP) :

The “Temporary Access Pass” (TAP) in Microsoft Entra is a time-limited secret code that can be configured for one or more uses12. Users can log in with a TAP to integrate other password-free authentication methods, such as Microsoft Authenticator, FIDO2 and Windows Hello Enterprise.

A TAP also facilitates recovery when a user has lost or forgotten a strong authentication factor such as a FIDO2 security key or the Microsoft Authenticator application, but needs to log in to register new strong authentication methods.

With the addition of Temporary Access Pass to Microsoft Entra ID, administrators can provide time-limited credentials to their users, enabling them to register from any device or location. Temporary Access Pass credentials satisfy the multi-factor authentication requirements of Conditional Access.

2 – Mindmap to configure Temporary Access Pass (TAP) :

here is the mindmap to configure Temporary Access Pass (TAP)

3 – Configure Temporary Access Pass (TAP) :

A – Enable Temporary Access Pass (TAP) from Entra ID :

To activate and use a TAP, please follow the steps below :

• Log in to the Microsoft Entra Administration Center as Global Admin or as an Authentication Policy Administrator.
• Go to Protection -> Authentication methods -> Policies.
• In the list of available authentication methods, select Temporary Access Pass.

• Click Enable, then select the users to be included or excluded from the policy.

• (Optional) Select Configure to change the default Temporary Access Pass settings, such as maximum lifetime, or length, then click Update.
• Select Save to apply the policy.

B – Add new authentication method per user :

To add new authentication method per user, please follow the steps below :

• Log in to the Microsoft Entra Administration Center
• Go to Identity -> All users
• Select All users fom the left menu bar.
• in the search bar type the name of the user and click on it.

Once in the user setting page :

1. Go to “Auhthentication methods” from the left menu bar
2. Select “+ Add Auhthentication method“
3. in the right Menu bar, select “Temporary Access Pass“
4. Set validity settings as your convinience.
5. Selct “Add” buton

• new window will appear with several information about password and validity.
• Copy provided password to notepad.

• Connect to user account : www.office.com

• Enter your Temporary Access Pass (TAP) here :

• Click Next

• finally you will connected to your account as you can see in the following printscreen.

• after accessing user can add new authentication method through this link : https://aka.ms/mysecurityinfo

Conclusion

TAP offers a secure and convenient way for users to connect to Microsoft Cloud without having to remember or enter complex passwords. It is particularly useful for organizations wishing to reduce their reliance on passwords and improve their overall security posture.

Thanks