This Azure AD feature can generate a temporary (one) time code. With this code, a user can (temporarily) log in without a password. This code is also registered as a (strong) authentication method, so you won't be prompted for a second-factor authentication when logging in. A TAP always contains an expiration date and time and the option to use it once.