A new employee needs a time-limited credential to bootstrap registration of a supported strong authentication method. Which capability fits?

1. Temporary Access Pass
2. A permanent shared administrator password
3. A storage SAS token
4. A sensitivity label