Glossary
Temporary Access Pass
A time-limited Entra ID passcode used for first-time sign-in or recovery when other methods aren't available.
A Temporary Access Pass (TAP) in Microsoft Entra ID is a time-limited passcode an admin issues to a user for first-time sign-in or account recovery when other authentication methods aren't available. The user enters the TAP at the sign-in prompt; once authenticated, they register their permanent authentication methods (Authenticator app, FIDO2 key, Windows Hello). TAPs can be single-use or multi-use, with a configurable validity window (typically 1–24 hours). Essential for passwordless onboarding — give the new hire a TAP, they sign in once, register their preferred methods, never need a password. Configured per-user in the Entra admin centre under Authentication methods.