A temporary access pass is a time-limited passcode that lets somebody sign in without completing the second step. It covers the case where multi-factor authentication is unavailable rather than broken.

Use it when a phone has been lost, a device is being replaced, or somebody needs emergency access while they set a new method up.

Before you begin

The client’s tenant must have temporary access passes enabled in its authentication methods policy. If it does not, the request fails and the fix is on their side rather than in Avvi.

You need the permission for temporary access pass management, granted through your access group.

Ask Avvi

1. Open chat.
2. Say what you want, naming the person. For example: create a temporary access pass for jane@example.com, she has lost her phone.
3. Avvi asks two questions and waits for both. How long the pass should last, and whether it can be used once or repeatedly within that window.
4. Answer both, read the confirmation, then confirm.

Avvi returns the pass behind a click-to-reveal control rather than printing it into the conversation.

Good to know

The default lifetime is 60 minutes, and it can be set anywhere from 10 minutes to 30 days.

A single-use pass stops working the moment it has been used once. A reusable one keeps working until its lifetime runs out, which is the right choice for somebody setting up several devices.

Verify it worked

Ask the person to sign in with the pass.

The person should get in without being asked for the second step, and should then register a new method while they have access.

If something doesn’t look right

If Avvi reports that the request failed, check whether temporary access passes are enabled in that client’s tenant. That is the most common cause and it is not something Avvi can switch on.

If the pass is refused at sign-in, check whether it has already been used and was single-use, or whether its lifetime has run out.

If neither explains it, open a support conversation from the Help drawer. Include the client name, the person’s email address, and the lifetime you chose.

FAQ

Q: How do I get the pass to the person safely?

A: Avvi can create a link that expires and limits how many times it can be opened, which is safer than sending it in an email.

Q: Should I use this or reset their multi-factor authentication?

A: A pass gets them working now. Resetting removes their registered methods. For somebody who has lost a phone and needs access today, the pass is the immediate fix and the reset can follow.

Q: What happens when the pass expires?

A: They are asked for the second step again. If they have not registered a new method by then, they are locked out once more.