Temporary Access Pass
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit eab7b06 · +2 −2 lines · also on GitHub
⋯ 1 unchanged line
22
title: Configure a Temporary Access Pass in Microsoft Entra ID to register passwordless authentication methods
33
description: Learn how to configure and enable users to register passwordless authentication methods by using a Temporary Access Pass (TAP).
44
ms.topic: how-to
5
−ms.date: 02/16/2026
5
+ms.date: 03/04/2026
66
ms.author: justinha
77
author: tilarso
88
ms.reviewer: tilarso
⋯ 176 unchanged lines
185185
186186
Users need to reauthenticate with different authentication methods after the TAP is expired or deleted.
187187
188
−Tokens (session tokens, refresh tokens, access tokens, and so on) issued during a TAP sign-in have their maximum lifetime capped at the TAP expiration time at the moment of issuance. However, TAP expiration doesn't retroactively invalidate sessions that are already established. Session token lifetime is governed by [Conditional Access session controls](~/identity/conditional-access/concept-session-lifetime.md), so a user who signs in with a TAP could retain access longer than the TAP lifetime depending on the Conditional Access configuration. To limit how long access lasts after a TAP sign-in, configure the [sign-in frequency](~/identity/conditional-access/howto-conditional-access-session-lifetime.md#sign-in-frequency) policy.
188
+Tokens (session tokens, refresh tokens, access tokens, and so on) issued during a TAP sign-in have their maximum lifetime capped at the TAP expiration time at the moment of issuance. However, TAP expiration doesn't retroactively invalidate sessions that are already established. Session token lifetime is governed by [Conditional Access session controls](/entra/identity/conditional-access/concept-session-lifetime), so a user who signs in with a TAP could retain access longer than the TAP lifetime depending on the Conditional Access configuration. To limit how long access lasts after a TAP sign-in, configure the [sign-in frequency](/entra/identity/conditional-access/howto-conditional-access-session-lifetime#sign-in-frequency) policy.
189189
190190
## Delete an expired Temporary Access Pass
191191
⋯ 48 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 04:02 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.