Pre-requisite for a smoother onboarding

• Please inform your reviewer to be available for approving your request to prevent delays due to time zone differences between you and the reviewer. 
• Ensure you have your work email and Employee ID ready. You should eventually get them from your manager.  
• Ensure your hardware (laptop/mobile) can adopt the process below. 
• For employees in China, please use the button at the top of the page named "Setup your account (China Android Scenario)". 
• Before starting the process, read through the instructions for 'Identity Pass','Password Setup' and 'MFA setup' page to avoid any mid-onboarding blockers. 

Obtain your initial Login using Identity Pass

The Identity Pass application helps to verify a user’s identity before granting them temporary access to corporate resources.

Check out the Identity Pass video tutorial:

Step 1: Download the Identity Pass application by using the QR code below on your mobile device. 

Step 2: You can also access the application from your mobile browser ataka.ms/KnockKnock. 

Step 3: Launch the Identity Pass application by clicking on the icon downloaded on your mobile device.

Step 4: Allow Identity Pass to access your camera, microphone, and notifications. Note: If these are not allowed, you will not be able to successfully complete the process.

Step 5: Review and Accept Terms & Conditions. 

Step 6: Enter your personal email if you do not have access to your corporate email to receive process notifications. This is optional, and you can skip this step if you have access to your corporate email on this device. 

Step 7: Enter your Microsoft corporate email address (alias@microsoft.com), date of birth (Employee only). When choosing the DOB, select the year first, then month/date. For external staff, enter the employee ID (the manager needs to provide this information). Select Submit. 

• Note - As per identity app design, it always defaults to the current date and year. It's common for users to instinctively choose the month and day first, then the year.
• However, for Identity Pass, users need to select the year first and then proceed with the month and day. In case the user chooses the date or month first, it will not work.
• Important Note: Some users may be prompted to enter their UPN (Microsoft corporate email address, alias@microsoft.com and employee ID (provided by their manager), then select "Get TAP." This UI change is being rolled out in stages, so not all users will see it immediately.

Step 8: Smile, it's selfie time! Be sure the photo captures your entire face looking forward into the camera. Your selfie will be compared with your Microsoft badge photo (if applicable) and will be deleted after 24 hours. 

• Important Note: For some users, a prompt for liveness detection may appear. In that case, please follow the prompts for liveness detection. Make sure you are in a well-lit room and remove any obstructions from your face (e.g., masks or sunglasses). Your picture captured in liveness detection will be compared with your Microsoft badge photo (if applicable) and will be deleted after 48 hours.
• This liveness detection feature is rolling out in stages, so not all users will receive a prompt for liveness detection.

Step 9: Wait for the incoming video call from your reviewer. They have up to 24 hours to initiate the video call with you. This may happen shortly after you submit depending on the reviewer's availability. You will receive a push notification on your phone (please ensure that push notifications are allowed in the Identity Pass application settings), a Microsoft Team notification, and an email notification to join the call with an approver.  

Step 10: Select the link in one of the above-mentioned notifications to Join the video call with the reviewer. To successfully complete the verification process, you must stay on the video call with your manager for at least 15 seconds and answer the reviewer's identity verification questions. Once the call is complete, wait for the reviewer's decision. 

Step 11: When your request is verified, you will receive a notification to retrieve a Temporary Access Pass (TAP) in the Identity Pass app. This TAP is only valid for 30 minutes.

• Important Note: After successful verification and approval, you'll receive a verified ID in the Identity Pass app to streamline future requests. If you don't complete onboarding within 30 minutes or lose access within 30 days, you can easily request a new Temporary Access Pass (TAP) by completing liveness detection, skipping the need for another video call if the previous verification was completed within that 30-day timeframe.
• This Verified ID feature is rolling out in stages, so not all users will see Verified ID in the Identity Pass app immediately.

Important note: You need to setup a Permanent password "Section 2" and Register work account in multi-factor authentication (MFA) methods "Set up MFA" using TAP. Both sections must be completed within 30 minutes. Failure to do will require you to get another TAP from your manager.

Steps for Existing Users with a Verified ID

Follow the instructions above from Step 1 to Step 8. Note that existing users with a Verified ID do not need a video call with their manager to receive the TAP. A new TAP will be generated by following Steps 1 through Step 8.