This guide will go over the steps on how to access and use Temporary Access Passwords for account you do not have access to. 


Pre-requisites:

  • Access to Intune
  • User account wanting TAP



When working on a mobile, other laptops apps that require the m365 login, and you do not have the password or are getting stuck at the 2FA, this is where TAP are a go-to for an IT space. This is how you enable TAP's for users.


Step 1:

Go to Intune > Groups


Step 2:

Enter 'TAP Group'


Step 3: Add Member > Add whoever you need. 


Step 4:
Users > Type in user's name and select them. 



Step 5:
Authentication Methods > Add Authentication Method > Select drop down > Temporary Access Pass

  • Do a max time of 480 Minutes (8 Hours) - Otherwise do less than tha



Considerations

If the user is still using another device on the same account (i.e you are setting up a spare phone for them while they normally work on their laptop), they will be prompted to login with Temporary Access Password - They can go 'Other options' and login with their normal credentials. 


TAP's will bypass all MFA and allow access to the account

This does not currently work when logging into laptops


Use the credential it provides to login during this time. 

  • If these are lost, the TAP can be deleted as a Authentication Method