> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Manage Temporary Access Codes

Temporary Access Codes provide short-term sign-in when users cannot access their primary authenticator.

- **Common use case.** A user misplaces the mobile device that contains their soft token application.
- **Supported fallback authenticators.** one-time passcode (OTP), Grid Card, and token authenticators.

note

Temporary Access Codes can be used as a standalone authenticator, but Entrust recommends using them only for interim authentication.

Key details:

- **Sign-in scope.** IDaaS, OIDC, SAML, and RADIUS accounts.
- **Entrust Identity Enterprise behavior.** Temporary Access Codes can be used as an alternative to OTP or token authentication, but not as a standalone authenticator.
- **Usage limits.** Configure by number of uses or by time, for example single use or 24-hour validity.
- **TAC vs OTP.** A Temporary Access Code can be reused within its configured limits; an OTP is single-use and delivered during authentication.
- **Delivery.** Temporary Access Codes are not sent automatically during authentication.
- **User visibility.** Users cannot view assigned Temporary Access Codes in the User Portal.
- **Admin action required.** Administrators must provide the code to the user.
- **One-code rule.** A user can have only one Temporary Access Code at a time. If the code expires, delete it before assigning a new one.

## When to use Temporary Access Codes

Use Temporary Access Codes as a short-term recovery option while the user restores access to their primary authenticator.

Example: A user is traveling and loses access to their phone-based token authenticator. You can issue a Temporary Access Code with limited uses and short expiry so the user can sign in and complete urgent tasks.

### Prerequisites for using Temporary Access Code

A Temporary Access Code can be used for authentication only if:

- It has been assigned to the user.
- It has not expired.
- It has not reached the maximum number of uses allowed.
- The resource rule controlling access to the account allows Temporary Access Codes to be used for authentication.

## Topics in this section

[📄️Settings Use this procedure to update Temporary Access Code settings in IDaaS.](/docs/authentication-and-security/manage-authenticators/manage-temporary-access-codes/modify-temporary-access-codes.md)

[📄️Assign a code Use this procedure to assign a Temporary Access Code when a user needs to authenticate but cannot access their primary authenticator.](/docs/authentication-and-security/manage-authenticators/manage-temporary-access-codes/assign-a-temporary-access-code.md)