Microsoft V- Employee Setup

TAP-based onboarding for Microsoft V- employees — identity verification, password setup, and passkey creation.

Three steps: get a TAP code via Identity Pass, set your password through Authenticator, then create a passkey. The passkey step is the one people skip — don't.

Before You Start

What you'll need

Your V- email address (alias@microsoft.com)
Your Microsoft Employee ID (ask HR if needed)
A smartphone: iPhone iOS 17+ or Android 14+ (not rooted, Google Mobile Services enabled)
Good internet connection and a well-lit room for video verification

Timing

Coordinate with your V- manager before starting. They need to be available for a video verification call within 24 hours of your request. Once you receive your TAP code, you have 30 minutes to complete Steps 2 and 3.

Download both apps from your phone's app store before continuing:

Microsoft Identity Pass — for identity verification
Microsoft Authenticator — for passwords and passkeys

Step 1: Identity Pass Request

Open the Identity Pass app. Download from aka.ms/KnockKnock or scan the QR code at iamnew.powerappsportals.com.
Grant all permissions when prompted.
Enter your V- email and Employee ID, then tap Get TAP.
Complete the face scan (liveness detection).
Wait for a video call notification — up to 24 hours.
Join the call, stay on at least 15 seconds, and answer the verification questions.
Receive your TAP code. It's valid for 30 minutes.

Required permissions — allow all

Camera: for liveness detection and video call
Location: for security verification. Android users must select Precise location, not Approximate.
Microphone: for video call
Notifications: to receive call alerts

For best results during liveness detection: be in a well-lit room, face the camera directly, remove masks or sunglasses, and follow the on-screen instructions.

After the call

You'll receive a TAP code valid for 30 minutes. Don't delete the Identity Pass app — you may need it to regenerate your TAP.

Step 2: Password Setup

Use Authenticator, not the web portal

You must reset your password through the Microsoft Authenticator app. The web portals only work from PCs already joined to V- Azure AD.

Open Microsoft Authenticator.
Add account → Work or school → Sign in.
Enter your V- email and TAP code.
Tap your account → settings gear icon.
Select Reset your password.
Create a new permanent password.

Password requirements (3 of 4): uppercase, lowercase, numbers, symbols. Minimum 8 characters. Cannot contain previous Microsoft passwords, parts of your name or title, sequential characters, or dictionary words.

Step 3: Create a Passkey

Do not skip this step

Without completing passkey setup, you cannot access Microsoft resources.

iPhone

iOS 17

iOS 17 only supports one passkey app. Update to iOS 18 or disable other password managers before continuing.

In Authenticator, tap your V- account → settings gear.
Tap Create a passkey.
Tap Open Settings.
Navigate to Settings → General → Autofill & Passwords (iOS 18) or Settings → Passwords → Password Options (iOS 17).
Turn on AutoFill Passwords and Passkeys.
Select Authenticator under "Autofill From".
Return to Authenticator and tap Continue.

Android

In Authenticator, tap your V- account → settings gear.
Tap Create a passkey.
Choose to register device (or skip).
Go to phone Settings → Passwords and Accounts.
Enable Passwords, passkeys, and autofill for Authenticator.
Return to Authenticator to complete.

To verify it worked: go to outlook.com/microsoft.com, enter your email, and confirm you're prompted for your passkey (Face ID / fingerprint / PIN) rather than just a password.

Troubleshooting

TAP expired before finishing Open Identity Pass, complete liveness detection again, and get a new TAP immediately. No video call is required if within 30 days of the original request.

Can't access Microsoft resources Most likely you didn't complete the passkey step. Try signing into outlook.com/microsoft.com — if you're only asked for a password (not a passkey), repeat Step 3.

Can't access the password portal on the web This is expected for new V- employees. Web portals only work from PCs joined to V- Azure AD. Use the Authenticator app on your phone.