Skip to main content

Manage Temporary Access Codes

Temporary Access Codes provide short-term sign-in when users cannot access their primary authenticator.

  • Common use case. A user misplaces the mobile device that contains their soft token application.
  • Supported fallback authenticators. one-time passcode (OTP), Grid Card, and token authenticators.
note

Temporary Access Codes can be used as a standalone authenticator, but Entrust recommends using them only for interim authentication.

Key details:

  • Sign-in scope. IDaaS, OIDC, SAML, and RADIUS accounts.
  • Entrust Identity Enterprise behavior. Temporary Access Codes can be used as an alternative to OTP or token authentication, but not as a standalone authenticator.
  • Usage limits. Configure by number of uses or by time, for example single use or 24-hour validity.
  • TAC vs OTP. A Temporary Access Code can be reused within its configured limits; an OTP is single-use and delivered during authentication.
  • Delivery. Temporary Access Codes are not sent automatically during authentication.
  • User visibility. Users cannot view assigned Temporary Access Codes in the User Portal.
  • Admin action required. Administrators must provide the code to the user.
  • One-code rule. A user can have only one Temporary Access Code at a time. If the code expires, delete it before assigning a new one.

When to use Temporary Access Codes​

Use Temporary Access Codes as a short-term recovery option while the user restores access to their primary authenticator.

Example: A user is traveling and loses access to their phone-based token authenticator. You can issue a Temporary Access Code with limited uses and short expiry so the user can sign in and complete urgent tasks.

Prerequisites for using Temporary Access Code​

A Temporary Access Code can be used for authentication only if:

  • It has been assigned to the user.
  • It has not expired.
  • It has not reached the maximum number of uses allowed.
  • The resource rule controlling access to the account allows Temporary Access Codes to be used for authentication.

Topics in this section​