Temporary Access Pass (TAP) for School account

Temporary Access Pass (TAP) for School account

Using a Temporary Access Pass to sign in to your school account while traveling overseas beyond Australia and New Zealand and you did not setup MFA before. 

Warning
Note: MFA challenge is not required for location access from NZ and Australia under current security policy. 

Info
What is a Temporary Access Pass?

A Temporary Access Pass (TAP) is a short one-time code issued by the Pinehurst ICT Helpdesk. It lets your child sign in to their school account when they are overseas and have been asked for an extra verification step but have not yet set one up.

The code can only be used once and expires after a short time, so please use it straight away when you receive it.

Notes
Before you start

Make sure you have the following ready before you begin:

- The TAP code provided by the ICT Helpdesk
- Your child's school username, for example AB123456@pinehurst.school.nz
- A device to sign in on, such as a laptop, tablet or phone
- A parent or caregiver mobile number, or a parent's phone with Microsoft Authenticator installed (you will need this in the final step to set up your verification method)

Step 1 - Go to the Microsoft sign-in page

Open a web browser and go to office.com or any Microsoft 365 app your child normally uses. Click Sign in and enter your child's school username, then click Next.

Step 2 - Use the Temporary Access Pass instead of a password

On the next screen you will be asked to enter a password or verify your identity. Look for a link that says "Other ways to sign in", "Use a different method", or "Sign in another way" and click it.

From the list of options that appears, select Temporary Access Pass.

If you do not see this option, try clicking "More choices" or "I can't use my Microsoft Authenticator app right now" as the option may be listed slightly differently depending on the device and browser you are using.

Step 3 - Enter the TAP code

Type in the TAP code exactly as provided by the helpdesk. It is case-sensitive so enter it carefully. Click Sign in.
Your child will now be signed in to their school account.

Step 4 - Set up a verification method straight away

This is the most important step. The TAP has now been used and cannot be used again. You need to set up a proper verification method before signing out, so your child can sign in normally for the rest of the trip.

1. While still signed in, open a new browser tab and go to mysignins.microsoft.com.
2. Click on Security info in the left-hand menu.
3. Click Add sign-in method.
4. Choose one of the following options:

Option A - Phone (recommended, simplest to set up)
Select Phone and enter a parent or caregiver mobile number. A text message with a verification code will be sent to that number. Enter the code to confirm it. This number will be used to verify your child's sign-in for the rest of the trip and for any future overseas travel.

Option B - Authenticator app (on a parent's phone)
Select Authenticator app. Download Microsoft Authenticator from the App Store or Google Play on a parent's phone if it is not already installed. Follow the on-screen steps to scan a QR code with the parent's phone to link it to your child's account.

5. Once the method is added you will see it listed under Security info. That means it is set up and ready to use.

Step 5 - Sign in normally from now on

Your child can now sign out and sign back in as normal. When signing in from overseas they will be asked to verify their identity using the method they just set up. For a phone number, a text message code will be sent. For the Authenticator app, a notification will appear on the parent's phone to approve.

They will not need another TAP for the rest of this trip or for any future overseas travel, as long as they still have access to the registered phone number or device.

Idea
What if the TAP code does not work?

If the code is not accepted, check the following:

- Make sure you entered the code exactly as provided, including capital letters - it is case-sensitive
- Check that the 1 hour time limit has not passed - if it has, contact the IT Helpdesk and ask for a new one
- Make sure you selected "Temporary Access Pass" as the sign-in method rather than entering it in the password field

Notes
What if you signed in but did not get a chance to set up a verification method?

If your child was signed in using the TAP but got interrupted or navigated away before completing Step 4, the TAP will have already been used. Contact the ICT Helpdesk and ask for a new TAP so you can go through the steps again and complete the verification method setup.

Notes
What if you cannot add a verification method because you have no phone access?

If you are unable to add a phone number or the Authenticator app because you have no access to any phone, contact the ICT Helpdesk. We may be able to assist with an alternative solution depending on the circumstances.



    • Related Articles

    • Change school account password

      Note: This only applies to students and staff. We don't and no longer manage caregiver's passwords. This is instruction to change password. If you forgot your password and want to reset, please use another help article. Change password You can only ...

    • Keeping Your School Account Safe

      Important information for students and parents Every student is given a school Microsoft account to support learning, communication, and access to school systems. Keeping this account safe is very important for the student, the school, and the wider ...

    • Connect to school Wi-Fi

      We have the following Wi-Fi SSID available: SSID Users Credentials required Notes pinehurst-BYOD Staff and Student BYOD devices Username (or email address) and password School logins only pinehurst-Internal School devices, staff BYOD devices Username ...

    • Offboarding: Backing Up Your School Files

      As you prepare to leave the school, it's important to back up any personal or academic files you've stored in your school Microsoft 365 account. This guide will walk you through how to save your files from OneDrive, Teams, and OneNote before your ...

    • Adding Alternate Sign‑In and Account Recovery Methods

      Purpose To keep student Microsoft school accounts secure and to reduce the need for IT assistance when passwords are forgotten, students are required to set up at least one alternate sign‑in or recovery method on their school account. These methods ...