Temporary Access Pass
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 6ea5b9d · +3 −3 lines · also on GitHub
⋯ 51 unchanged lines
5252
| Minimum lifetime | 1 hour | 10 – 43,200 Minutes (30 days) | Minimum number of minutes that the TAP is valid. |
5353
| Maximum lifetime | 8 hours | 10 – 43,200 Minutes (30 days) | Maximum number of minutes that the TAP is valid. |
5454
| Default lifetime | 1 hour | 10 – 43,200 Minutes (30 days) | Individual passes within the minimum and maximum lifetime configured by the policy can override default value. |
55
− | One-time use | False | True/False | When the policy is set to false, passes in the tenant can be used either once or more than once during its validity (maximum lifetime). By enforcing one-time use in the TAP policy, all passes created in the tenant are one-time use. |
55
+ | One-time use | False | True/False | When the policy is set to false, a TAP in the tenant can be used either once or more than once during its validity (maximum lifetime). If you enforce one-time use in the TAP policy, all passes created in the tenant are one-time use. |
5656
| Length | 8 | 8-48 characters | Defines the length of the passcode. |
5757
5858
## Create a Temporary Access Pass
⋯ 169 unchanged lines
228228
229229
- If a TAP isn't offered to a user during sign-in:
230230
- Make sure the user is in scope for TAP use in the Authentication methods policy.
231
− - Make sure the user has a valid TAP, and if it's one-time use, it wasn’t used yet.
231
+ - Make sure the user has a valid TAP. If the TAP is one-time use, make sure it wasn’t used yet.
232232
- If **Temporary Access Pass sign in was blocked due to User Credential Policy** appears during sign-in with a TAP:
233
− - Check that the user is in scope for the TAP policy
233
+ - Check that the user is in scope for the TAP policy.
234234
- Make sure the user doesn't have a TAP for multiple use while the Authentication methods policy requires a one-time TAP.
235235
- Check if a one-time TAP was already used.
236236
- If **Temporary Access Pass cannot be added to an external guest user** appears when you try to add a TAP to an account as an authentication method, the account is an external guest. Both internal and external guest accounts have an option to add a TAP for sign-in in the Microsoft Entra admin center and Microsoft Graph APIs. However, only internal guest accounts can be issued a TAP.
⋯ 4 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 04:02 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.