1.
1. Identity Pass Request
Android users from China, Click here to set up your accountPre-requisite for a smoother onboarding Experience
Please review and complete the following before starting your Identity Pass request:
Required Information and Access
- Government-issued photo ID
Passport, driver’s license, or another valid government-issued photo ID. - Work details (request from your manager if needed)
- Work email (UPN)
- Employee ID
- Badge photo in GSAM (required for Microsoft FTEs)
- Supported mobile device
Use a phone with: - A working camera
- Notifications enabled
- Reliable internet connection (Wi-Fi recommended)
Minimum Device Requirements
Your device must meet the minimum supported OS version:
- iOS: Version 17 or later
- Android: Version 14 or later
Approver Availability
Your manager or designated reviewer should be available to approve and complete the request during onboarding
Required Applications
Download and install the following applications from the Google Play Store or Apple App Store before starting:
- Microsoft Company Portal
- Microsoft Authenticator
- Identity Pass
Download the Identity Pass application using the QR code provided or visit: aka.ms/KnockKnock
Important Notes
- Keep the Identity Pass application installed. You may need it again during onboarding or for future account-related requests.
- Employees located in China should use the button at the top of the page labeled: "Setup your account (China Android Scenario)"
Important Note: The Identity Pass onboarding experience has recently changed. After entering your employee ID and alias in the Identity Pass application, please review the screen carefully and select the correct instruction tab below based on the button displayed in the app.
If your screen displays Get TAP, follow the Identity Pass – TAP Instructions tab.
If your screen displays Get Passkey, follow the Identity Pass – Passkey Instructions tab.
Identity Pass: Verify your identity and set up your passkey
Welcome! This guide walks you through verifying your identity with Identity Pass and setting up your passkey so you can securely access your Microsoft corporate account. The full process takes about 20–30 minutes.
Tip: Don't sign in to the apps yet. You'll do that during the steps below. And keep Identity Pass installed after onboarding, you may need it again later.
- Open the Identity Pass app.
- Allow Identity Pass to access your camera, location, microphone, and notifications.
- Review the consent notice and select Yes.
- Enter your UPN (work email), Employee ID, and personal email to request a Temporary Access Pass (TAP).
- Select No to verify government-issued ID, then select Start verification. AU10TIX opens automatically.
- Select Let's begin.
- Enter your personal email and enter the PIN code sent to your inbox.
- Enter your phone number and allow access to your phone and camera when prompted.
- Review and agree to the terms.
- Scan your government-issued ID following the on-screen prompts.
- Take a selfie when prompted.
- After your Verified ID is issued, select Open Authenticator.
- Review the details and add your Verified ID. Then, confirm the AU10TIX Verified ID now appears in Authenticator.
- Return to Identity Pass and select Ready to complete the liveness check.
- Select I have my Verified ID, then choose your AU10TIX Verified ID. Authenticator opens automatically.
- Select your AU10TIX Verified ID. Identity Pass reopens automatically.
- Your request is submitted for review. Wait for the notification in Identity Pass to join the call with your approver.
- When you receive the notification, join the call from inside Identity Pass.
- Your reviewer finalizes the request on the call.
- Register your passkey.
- Save the passkey and select Add passkey.
Step 1: Identity Pass
Note: For Android, users must select 'Precise' location to submit a request. If user selects 'Approximate' location, you will be prompted to grant permissions again until 'Precise' location is selected.
If the above-mentioned options are not allowed, you will not be able to successfully complete the process.
If you miss the pop-up, you can always go back to Settings and manually enable Precise Location for the Identity Pass app
Step 2: Government ID Verification
Note: Check Spam/Junk if you don’t see it.
Step 3: Microsoft Authenticator
Step 4: Back in Identity Pass
Step 5: Back in Microsoft Authenticator
Step 6: Final steps in Identity Pass
Step 7: Back in Microsoft Authenticator
Step 8: IAM New (web)
Return to the IAM New – Microsoft Corp Access Guidelines and follow Step 2: PRMFA setup to access corporate resources.
Obtain your initial Login using Identity Pass
The Identity Pass application helps to verify a user's identity before granting them temporary access to corporate resources.
Expected experience:
Step-by-Step Process
Step 1: Download the Identity Pass application using the QR code or visit https://aka.ms/KnockKnock
Step 2: Launch the Identity Pass application by clicking on the icon downloaded on your mobile device.
Step 3: Allow Identity Pass to access your camera, location, microphone, and notifications.
Note: For Android, users must select 'Precise' location to submit a request. If user selects 'Approximate' location, you will be prompted to grant permissions again until 'Precise' location is selected.
If the above-mentioned options are not allowed, you will not be able to successfully complete the process.
If you miss the pop-up, you can always go back to Settings and manually enable Precise Location for the Identity Pass app.
Step 4: Review and Accept Terms & Conditions.
Step 5: Enter your personal email, Microsoft corporate email (UPN), and Employee ID.
Step 6: Click 'No' to receive a verified ID on your Authenticator app. Please note: All new hires and first-time Identity Pass users will not have verified Id on the Authenticator app yet, so please click 'No'."
Step 7: Click "Start verification" and keep your ID ready.
Step 8: Click "Let's Begin" to start the verification process.
Step 9: Enter your personal email address (not your Microsoft account).
Step 10: Check your email for the verification mail and enter the PIN code.
Step 11: Enter your mobile number and click "Continue"
Step 12: Have a valid government-issued photo ID ready (e.g., Passport, Driver's License) or any other government-issued legal photo ID
Step 13: Click "Continue" to Allow camera access and capture your document.
Step 14: Click "Allow" to proceed further
Step 15: Review and Accept Terms & Conditions.
Step 16: Select Continue to capture the photo.
Step 17: Try to capture the legal document within the provided frame and verify the image before proceeding. Retake the photo if needed.
Step 18: Take a selfie for liveness detection. Remove glasses and masks, ensure good lighting.
Step 19: After verification, click "open the Authenticator app" to receive your Verified ID.
Step 20: You can view the VC on your Authenticator app, as shown in the image below.
Step 21: Return to the Identity Pass app and click "I have my Verified ID."
Step 22: Prepare for the liveness detection prompt and follow the instructions provided. Make sure you are in a well-lit room and remove any obstructions from your face (e.g., masks or sunglasses).
Note: If you receive an error message like this: 'Request denied. Your identity cannot be verified. Reach out to your Microsoft contact to have your badge picture updated'. → Reach out to your manager/reviewer to resolve this issue.
Step 23: Complete the face check.
Step 24: Click "Present Verified ID" to share your Verified ID with Identity Pass.
Step 25: Wait for the incoming video call from your reviewer (within 24 hours). Join via push notification, Teams, or email.
Step 26: Wait for the incoming video call from your reviewer. They have up to 24 hours to initiate the video call with you. This may happen shortly after you submit depending on the reviewer's availability. You will receive a push notification on your phone (please ensure that push notifications are allowed in the Identity Pass application settings), a Microsoft Team notification, and an email notification to join the call with an approver.
Step 27: Select the link in one of the above-mentioned notifications to Join the video call with the reviewer. To successfully complete the verification process, you must stay on the video call with your manager for at least 15 seconds and answer the reviewer's identity verification questions. Once the call is complete, wait for the reviewer's decision.
Step 28: When your request is verified, you will receive a notification to retrieve a Temporary Access Pass (TAP) in the Identity Pass app. This TAP is only valid for 30 minutes.
Important Note:
After successful verification and approval, you'll receive a Verified ID in the Identity Pass app to streamline future requests. If you don't complete onboarding within 30 minutes or lose access within 30 days, you can easily request a new Temporary Access Pass (TAP) by completing liveness detection, skipping the need for another video call if the previous verification was completed within that 30-day timeframe.
Step 29: Use the TAP code to set up your MFA in the Authenticator app by clicking "Set up my passkey" and follow the instruction in "PRMFA Setup".