Sign-in codes from the OATH TOTP open standard, generated by an authenticator app or by a hardware token (preview) and renewed every 30 or 60 seconds. A user can register up to five; OATH HOTP can't be used.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains OATH tokens in context, with comparison tables and the common traps.
Terms in this definition
- OATH token
Generates time-based one-time codes, either in hardware or in an authenticator app. Since it is used with a password as a second factor, it does not count as passwordless.
- Standard deployment type
A Foundry deployment type billed per token that keeps processing of prompts and responses inside the Azure geography of the resource, meeting data residency needs at lower volumes.
- App protection policy
A set of Intune rules on managed apps that safeguards organisational data, for example by demanding a PIN or preventing copy-paste and save-as into personal apps. It works whether or not the device is enrolled.
- Token
The unit of text an LLM works with, which may be a word, part of a word or punctuation. Billing, limits and context windows are all counted in these units.
- Preview channel
The pipeline runtime channel for trying out new features and upcoming runtime changes. Production pipelines belong on
current. - Chat message roles
Labels on chat messages: instructions go under system, the person's input under user, the model's previous answers under assistant, and results returned by a called tool under tool (or function).
- HOTP
A counter-based OATH method for one-time codes, as opposed to the time-based TOTP. Microsoft Entra ID supports only TOTP, not HOTP.
Related terms
- PAP
Password Authentication Protocol, a RADIUS password protocol which, when used between NPS and the RADIUS client, lets the NPS extension support all Microsoft Entra MFA methods, TOTP codes from OATH tokens or Authenticator included.