{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"redocly_category":"Guides","product":"Identity Management","type":"markdown"},"seo":{"title":"Generate temp code (Admin Portal)","description":"Everything about Mosaic Journeys, SDKs, and APIs","siteUrl":"https://developer.transmitsecurity.com/","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"generate-temp-code-admin-portal","__idx":0},"children":["Generate temp code (Admin Portal)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When users are unable to authenticate through standard methods—such as SMS, email OTP, or TOTP—due to outages, technical issues, or loss of access to their registered device, customer support can assist by providing a temp code. The Temporary Access Code, issued manually by customer support, serves as an alternative authentication method."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This secure solution allows users to regain access to their accounts during recovery flows."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Note"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This guide covers the Admin Portal approach, where a help desk admin generates the code directly from the user profile page — no custom backend integration required. For a journey-based integration, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/user/ido_account_recovery"},"children":["Account recovery with temp code (journey based)"]},"."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"how-it-works","__idx":1},"children":["How it works"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Temporary Access Code authentication combines human verification of the user's identity with validation of the code by Mosaic. The process begins when the user contacts customer support, who verifies their identity using security questions or other manual methods. After verification, a support agent generates a Temporary Access Code directly from the user's profile page in the Admin Portal (Step 4) and securely delivers it to the user via an offline method, such as a phone call or secure message. The user then enters the code, along with their identifier, in the client app (Step 3). Mosaic validates the Temporary Access Code to complete the process."]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"sequenceDiagram\n participant User\n participant AdminUser as Admin User\n participant AdminPortal as Admin Portal\n participant ClientApp as Client App\n participant Mosaic as Mosaic\n\n User-->>AdminUser: Request account recovery\n AdminUser-->>AdminUser: Verify user identity\n Note right of AdminUser: Step 4\n AdminUser->>AdminPortal: Generate temp code (user profile page)\n AdminPortal->>Mosaic: Code\n Mosaic->>AdminPortal: Return code\n AdminPortal->>AdminUser: temp code displayed in modal\n AdminUser-->>User: Provide temp code (phone call, secure chat)\n User-->>ClientApp: Submit identifier and temp code\n Note right of ClientApp: Step 3\n ClientApp->>Mosaic: Authenticate temp code\n Mosaic->>ClientApp: result\n alt Validation Success\n ClientApp-->>User: Access restored\n else Validation Failure\n ClientApp-->>User: Display error message\n end\n","diagramHtml":"","diagramHtmlDark":""},"children":["sequenceDiagram\n participant User\n participant AdminUser as Admin User\n participant AdminPortal as Admin Portal\n participant ClientApp as Client App\n participant Mosaic as Mosaic\n\n User-->>AdminUser: Request account recovery\n AdminUser-->>AdminUser: Verify user identity\n Note right of AdminUser: Step 4\n AdminUser->>AdminPortal: Generate temp code (user profile page)\n AdminPortal->>Mosaic: Code\n Mosaic->>AdminPortal: Return code\n AdminPortal->>AdminUser: temp code displayed in modal\n AdminUser-->>User: Provide temp code (phone call, secure chat)\n User-->>ClientApp: Submit identifier and temp code\n Note right of ClientApp: Step 3\n ClientApp->>Mosaic: Authenticate temp code\n Mosaic->>ClientApp: result\n alt Validation Success\n ClientApp-->>User: Access restored\n else Validation Failure\n ClientApp-->>User: Display error message\n end\n"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"before-you-start","__idx":2},"children":["Before you start"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge-wrapper"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge"},"children":["Admin portal"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge"},"children":["Configuration"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If this is your first time integrating with Mosaic, create an application in the Admin Portal as described ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://developer.transmitsecurity.com/guides/user/create_new_application"},"children":["here"]}," and create user. This flow can only be used for existing users."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-1-configure-temp-code","__idx":3},"children":["Step 1: Configure temp code"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge-wrapper"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge"},"children":["Admin portal"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge"},"children":["Configuration"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Configure temp code settings in the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Admin Portal"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["B2C"]}," or ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["B2B Identity"]}," ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["based on your setup"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Authentication methods"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["One-time passcodes"]},". Temp code shares the same settings as OTPs:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Expiration time"]},": set how long the code remains valid (in minutes). Default: 5 minutes."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Code length"]},": set the length of the one-time code."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Lockout"]},": configure the simple lockout policy:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Failed attempts allowed before lockout"]},": set the number of failed attempts that trigger a temporary lockout. Default: 3."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Lockout duration"]},": define how long the user must wait before they can try again. Default: 15 minutes."]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Cross-client OTP flow"]},": enable this setting to allow one client to initiate OTP generation while a different client submits it. This must be enabled for admins to generate codes from the Admin Portal."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-2-build-ui-for-temp-code-input","__idx":4},"children":["Step 2: Build UI for temp code input"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge-wrapper"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge"},"children":["Client"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To allow users to authenticate using a Temporary Access Code, provide a UI where they can enter their ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["User ID"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Temporary Access Code"]},". Expected flow:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The user enters their ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["User ID"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Temporary Access Code"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The client app submits both values to validate the code against Mosaic."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["On success, the user regains access. On failure, display an appropriate error message."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-3-generate-temporary-access-code","__idx":5},"children":["Step 3: Generate temporary access code"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge-wrapper"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge"},"children":["Admin portal"]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Important"},"children":[{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The user must already exist in the app and be associated with it."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The admin performing this action must have the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Generate temporary access code (Write)"]}," permission under the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Users"]}," tree. See ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/platform/manage_admin_users"},"children":["Manage admin users"]},"."]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Once the user's identity has been verified:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["From ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Admin Portal"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["B2C"]}," or ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["B2B Identity"]}," ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["based on your setup"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Users"]}," page, click the relevant user, then select the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Applications"]}," tab."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["On the relevant application row, click ",{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/dots_icon.11c0301d0afea79761c22e5955d3eaf57d05f39f88f288f3fbcd57a518e4cfd6.9c1bb791.png","alt":"icon","width":"20","style":{"verticalAlign":"middle"}},"children":[]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Generate temporary access code"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The generated code is displayed in a modal. Copy it and securely provide it to the user (e.g., via phone call or secure chat)."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The code follows the expiration and lockout policy configured in ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#step-2-configure-temp-code"},"children":["Step 2"]},"."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Audit event"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When a temporary access code is generated via the Admin Portal, an ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["admin_recovery_otp_code_generated"]}," event is recorded in the admin activity log. See ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/user/platform/activities#admin-events"},"children":["Admin activity events"]},"."]}]}]},"headings":[{"value":"Generate temp code (Admin Portal)","id":"generate-temp-code-admin-portal","depth":1},{"value":"How it works","id":"how-it-works","depth":2},{"value":"Before you start","id":"before-you-start","depth":2},{"value":"Step 1: Configure temp code","id":"step-1-configure-temp-code","depth":2},{"value":"Step 2: Build UI for temp code input","id":"step-2-build-ui-for-temp-code-input","depth":2},{"value":"Step 3: Generate temporary access code","id":"step-3-generate-temporary-access-code","depth":2}],"frontmatter":{"seo":{"title":"Generate temp code (Admin Portal)"}},"lastModified":"2026-04-07T08:55:48.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/user/account_recovery","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}